./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 21dc9f7e2ddd4ffb05ac36477bf46e7266bc68ad137742c8de338dbab6571869 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-02 20:49:31,110 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-02 20:49:31,113 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-02 20:49:31,170 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-02 20:49:31,170 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-02 20:49:31,175 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-02 20:49:31,177 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-02 20:49:31,182 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-02 20:49:31,185 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-02 20:49:31,188 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-02 20:49:31,189 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-02 20:49:31,192 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-02 20:49:31,192 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-02 20:49:31,199 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-02 20:49:31,200 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-02 20:49:31,202 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-02 20:49:31,204 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-02 20:49:31,205 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-02 20:49:31,206 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-02 20:49:31,208 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-02 20:49:31,212 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-02 20:49:31,213 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-02 20:49:31,216 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-02 20:49:31,217 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-02 20:49:31,223 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-02 20:49:31,223 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-02 20:49:31,223 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-02 20:49:31,224 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-02 20:49:31,224 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-02 20:49:31,225 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-02 20:49:31,226 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-02 20:49:31,227 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-02 20:49:31,227 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-02 20:49:31,228 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-02 20:49:31,229 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-02 20:49:31,229 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-02 20:49:31,230 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-02 20:49:31,230 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-02 20:49:31,230 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-02 20:49:31,231 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-02 20:49:31,232 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-02 20:49:31,236 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-11-02 20:49:31,271 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-02 20:49:31,271 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-02 20:49:31,272 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-02 20:49:31,272 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-02 20:49:31,274 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-02 20:49:31,274 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-02 20:49:31,274 INFO L138 SettingsManager]: * Use SBE=true [2022-11-02 20:49:31,274 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-11-02 20:49:31,275 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-11-02 20:49:31,275 INFO L138 SettingsManager]: * Use old map elimination=false [2022-11-02 20:49:31,276 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-11-02 20:49:31,276 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-11-02 20:49:31,277 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-11-02 20:49:31,277 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-02 20:49:31,277 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-02 20:49:31,277 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-02 20:49:31,278 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-02 20:49:31,278 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-02 20:49:31,278 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-02 20:49:31,278 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-11-02 20:49:31,279 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-11-02 20:49:31,279 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-11-02 20:49:31,279 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-02 20:49:31,279 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-02 20:49:31,279 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-11-02 20:49:31,280 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-02 20:49:31,280 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-11-02 20:49:31,280 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-02 20:49:31,280 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-02 20:49:31,281 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-02 20:49:31,281 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-02 20:49:31,282 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-11-02 20:49:31,282 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 21dc9f7e2ddd4ffb05ac36477bf46e7266bc68ad137742c8de338dbab6571869 [2022-11-02 20:49:31,549 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-02 20:49:31,575 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-02 20:49:31,578 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-02 20:49:31,579 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-02 20:49:31,580 INFO L275 PluginConnector]: CDTParser initialized [2022-11-02 20:49:31,581 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/../../sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c [2022-11-02 20:49:31,644 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/data/a76a5aa08/eaf4ce199c86444a9692aeea724c1cba/FLAG1c4e0709b [2022-11-02 20:49:32,215 INFO L306 CDTParser]: Found 1 translation units. [2022-11-02 20:49:32,215 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c [2022-11-02 20:49:32,234 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/data/a76a5aa08/eaf4ce199c86444a9692aeea724c1cba/FLAG1c4e0709b [2022-11-02 20:49:32,670 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/data/a76a5aa08/eaf4ce199c86444a9692aeea724c1cba [2022-11-02 20:49:32,673 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-02 20:49:32,674 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-02 20:49:32,676 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-02 20:49:32,676 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-02 20:49:32,680 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-02 20:49:32,681 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:49:32" (1/1) ... [2022-11-02 20:49:32,682 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@13c5d882 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:49:32, skipping insertion in model container [2022-11-02 20:49:32,682 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:49:32" (1/1) ... [2022-11-02 20:49:32,690 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-02 20:49:32,748 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-02 20:49:32,986 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c[5910,5923] [2022-11-02 20:49:33,347 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:49:33,357 INFO L203 MainTranslator]: Completed pre-run [2022-11-02 20:49:33,375 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c[5910,5923] [2022-11-02 20:49:33,450 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:49:33,479 INFO L208 MainTranslator]: Completed translation [2022-11-02 20:49:33,480 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:49:33 WrapperNode [2022-11-02 20:49:33,481 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-02 20:49:33,482 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-02 20:49:33,482 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-02 20:49:33,482 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-02 20:49:33,490 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:49:33" (1/1) ... [2022-11-02 20:49:33,517 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:49:33" (1/1) ... [2022-11-02 20:49:33,826 INFO L138 Inliner]: procedures = 97, calls = 346, calls flagged for inlining = 199, calls inlined = 440, statements flattened = 14252 [2022-11-02 20:49:33,827 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-02 20:49:33,828 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-02 20:49:33,828 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-02 20:49:33,828 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-02 20:49:33,837 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:49:33" (1/1) ... [2022-11-02 20:49:33,837 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:49:33" (1/1) ... [2022-11-02 20:49:33,902 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:49:33" (1/1) ... [2022-11-02 20:49:33,902 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:49:33" (1/1) ... [2022-11-02 20:49:34,056 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:49:33" (1/1) ... [2022-11-02 20:49:34,124 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:49:33" (1/1) ... [2022-11-02 20:49:34,135 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:49:33" (1/1) ... [2022-11-02 20:49:34,150 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:49:33" (1/1) ... [2022-11-02 20:49:34,177 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-02 20:49:34,178 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-02 20:49:34,179 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-02 20:49:34,179 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-02 20:49:34,180 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:49:33" (1/1) ... [2022-11-02 20:49:34,187 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:34,197 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:34,212 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:34,219 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-11-02 20:49:34,249 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-02 20:49:34,249 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-02 20:49:34,249 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-02 20:49:34,249 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-02 20:49:34,464 INFO L235 CfgBuilder]: Building ICFG [2022-11-02 20:49:34,476 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-02 20:49:40,573 INFO L276 CfgBuilder]: Performing block encoding [2022-11-02 20:49:40,614 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-02 20:49:40,614 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-02 20:49:40,622 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:49:40 BoogieIcfgContainer [2022-11-02 20:49:40,622 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-02 20:49:40,625 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-11-02 20:49:40,625 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-11-02 20:49:40,629 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-11-02 20:49:40,630 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-02 20:49:40,630 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 02.11 08:49:32" (1/3) ... [2022-11-02 20:49:40,631 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@e08711e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 02.11 08:49:40, skipping insertion in model container [2022-11-02 20:49:40,631 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-02 20:49:40,631 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:49:33" (2/3) ... [2022-11-02 20:49:40,631 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@e08711e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 02.11 08:49:40, skipping insertion in model container [2022-11-02 20:49:40,632 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-02 20:49:40,632 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:49:40" (3/3) ... [2022-11-02 20:49:40,634 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec9_product31.cil.c [2022-11-02 20:49:40,759 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2022-11-02 20:49:40,759 INFO L304 stractBuchiCegarLoop]: Hoare is false [2022-11-02 20:49:40,759 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-11-02 20:49:40,759 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-11-02 20:49:40,759 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-11-02 20:49:40,760 INFO L308 stractBuchiCegarLoop]: Difference is false [2022-11-02 20:49:40,761 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-11-02 20:49:40,761 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-11-02 20:49:40,783 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3743 states, 3742 states have (on average 1.86851950828434) internal successors, (6992), 3742 states have internal predecessors, (6992), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:49:40,933 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1855 [2022-11-02 20:49:40,934 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:49:40,934 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:49:40,949 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:49:40,949 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:49:40,950 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-11-02 20:49:40,959 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3743 states, 3742 states have (on average 1.86851950828434) internal successors, (6992), 3742 states have internal predecessors, (6992), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:49:41,008 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1855 [2022-11-02 20:49:41,008 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:49:41,008 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:49:41,013 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:49:41,013 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:49:41,020 INFO L748 eck$LassoCheckResult]: Stem: 2370#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 3662#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 25#L2763true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2892#L2756true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1498#L2771true main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1406#L3478true assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 3053#L3453true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 2392#L978true assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 2118#L95true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1818#L120true bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2195#L653true assume 0 == initPersonOnFloor_~floor#1; 2472#L654true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 3376#L761-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 282#L445true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1821#L457-2true assume { :end_inline_callOnFloor } true; 201#L797true assume { :end_inline_initPersonOnFloor } true; 421#L3258true assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1049#L382true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3615#L409true isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2502#L2724true stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 579#L2109true assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 847#L1372true stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 3474#L2113true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1378#L2126true timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 50#L2261true assume !(0 != timeShift_~tmp___9~2#1); 2984#L2352true assume 1 == ~doorState~0;~doorState~0 := 0; 3159#L2352-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 739#L382-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3121#L409-3true isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2813#L2724-1true stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1850#L1964true assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1702#L1372-3true stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1902#L1977true timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1758#L2360true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 2206#L2021true assume !(1 == ~currentHeading~0); 539#L2031true assume !(0 == ~currentFloorID~0); 1285#L2031-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 871#L2037-1true assume { :end_inline_continueInDirection } true; 1448#L2369-2true assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 650#L1372-5true __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 2614#L1432-6true assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 2492#L1464-6true __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 3234#L1021true assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1862#L1031-1true assume { :end_inline___utac_acc__Specification9_spec__3 } true; 777#L2384true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1739#L3285-2true [2022-11-02 20:49:41,022 INFO L750 eck$LassoCheckResult]: Loop: 1739#L3285-2true assume !false; 747#L3286true cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 3736#L3289true assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1860#L1195true cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1286#L3293true assume 1 != cleanup_~tmp___0~12#1; 1879#L3293-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1018#L382-65true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 145#L409-65true anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 2323#L1480true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 452#L1544true isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 3002#L1557true cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 3686#L3305true assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1469#L382-70true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 72#L409-70true isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 606#L2724-3true stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 291#L2109-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 2099#L1372-6true stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 3168#L2113-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 933#L2126-1true timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 2296#L2261-2true assume !(0 != timeShift_~tmp___9~2#1); 653#L2352-3true assume 1 == ~doorState~0;~doorState~0 := 0; 2490#L2352-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 340#L382-73true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3552#L409-73true isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1297#L2724-4true stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1642#L1964-2true assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 729#L1372-9true stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1327#L1977-2true timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 2618#L2360-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1927#L2021-3true assume !(1 == ~currentHeading~0); 47#L2031-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1330#L2031-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3571#L2037-7true assume { :end_inline_continueInDirection } true; 2935#L2369-5true assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1588#L1372-11true __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 873#L1432-13true assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 2628#L1464-13true __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1046#L1021-2true assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 2743#L1031-3true assume { :end_inline___utac_acc__Specification9_spec__3 } true; 2233#L2384-1true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1739#L3285-2true [2022-11-02 20:49:41,028 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:49:41,029 INFO L85 PathProgramCache]: Analyzing trace with hash -1924247499, now seen corresponding path program 1 times [2022-11-02 20:49:41,038 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:49:41,039 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [214812947] [2022-11-02 20:49:41,039 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:49:41,040 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:49:41,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:49:41,428 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:49:41,428 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:49:41,429 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [214812947] [2022-11-02 20:49:41,430 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [214812947] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:49:41,430 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:49:41,430 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:49:41,432 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2003938522] [2022-11-02 20:49:41,433 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:49:41,437 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:49:41,438 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:49:41,438 INFO L85 PathProgramCache]: Analyzing trace with hash 39229735, now seen corresponding path program 1 times [2022-11-02 20:49:41,438 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:49:41,439 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1899182057] [2022-11-02 20:49:41,439 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:49:41,439 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:49:41,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:49:41,658 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:49:41,658 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:49:41,659 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1899182057] [2022-11-02 20:49:41,659 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1899182057] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:49:41,659 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:49:41,659 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-02 20:49:41,660 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [34362273] [2022-11-02 20:49:41,660 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:49:41,661 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:49:41,662 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:49:41,692 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 20:49:41,693 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-02 20:49:41,704 INFO L87 Difference]: Start difference. First operand has 3743 states, 3742 states have (on average 1.86851950828434) internal successors, (6992), 3742 states have internal predecessors, (6992), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 7 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:49:50,659 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:49:50,660 INFO L93 Difference]: Finished difference Result 31753 states and 58868 transitions. [2022-11-02 20:49:50,661 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31753 states and 58868 transitions. [2022-11-02 20:49:50,958 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 13868 [2022-11-02 20:49:51,141 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31753 states to 31573 states and 58670 transitions. [2022-11-02 20:49:51,142 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31573 [2022-11-02 20:49:51,177 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31573 [2022-11-02 20:49:51,178 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31573 states and 58670 transitions. [2022-11-02 20:49:51,229 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-02 20:49:51,229 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31573 states and 58670 transitions. [2022-11-02 20:49:51,277 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31573 states and 58670 transitions. [2022-11-02 20:49:51,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31573 to 10643. [2022-11-02 20:49:51,584 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10643 states, 10643 states have (on average 1.8623508409283096) internal successors, (19821), 10642 states have internal predecessors, (19821), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:49:51,757 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10643 states to 10643 states and 19821 transitions. [2022-11-02 20:49:51,759 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10643 states and 19821 transitions. [2022-11-02 20:49:51,760 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-02 20:49:51,765 INFO L428 stractBuchiCegarLoop]: Abstraction has 10643 states and 19821 transitions. [2022-11-02 20:49:51,774 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-11-02 20:49:51,774 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10643 states and 19821 transitions. [2022-11-02 20:49:51,827 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 5377 [2022-11-02 20:49:51,827 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:49:51,828 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:49:51,834 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:49:51,835 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:49:51,836 INFO L748 eck$LassoCheckResult]: Stem: 38992#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 38993#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 35603#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 35604#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 38194#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 38092#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 38093#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 39004#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 38802#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 36808#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 38553#L653 assume 0 == initPersonOnFloor_~floor#1; 38859#L654 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 35947#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 36208#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 35827#L457-2 assume { :end_inline_callOnFloor } true; 36033#L797 assume { :end_inline_initPersonOnFloor } true; 36034#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 36510#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 37588#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 39515#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 36801#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 36803#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 39490#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 39491#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 44253#L2261 assume !(0 != timeShift_~tmp___9~2#1); 44254#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 45670#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 45669#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 45668#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 45667#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 45665#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 38423#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 38424#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 38479#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 38480#L2021 assume !(1 == ~currentHeading~0); 36730#L2031 assume !(0 == ~currentFloorID~0); 36731#L2031-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 37316#L2037-1 assume { :end_inline_continueInDirection } true; 37317#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 36927#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 36928#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 36266#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 39081#L1021 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 35624#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 38594#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 43167#L3285-2 [2022-11-02 20:49:51,836 INFO L750 eck$LassoCheckResult]: Loop: 43167#L3285-2 assume !false; 43163#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 43158#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 43144#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 42885#L3293 assume 1 != cleanup_~tmp___0~12#1; 42775#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 42774#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 35903#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 35904#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 42759#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 42756#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 41535#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 41534#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 39551#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 40971#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 39756#L2109-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 39758#L1372-6 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 39745#L2113-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 39411#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 45339#L2261-2 assume !(0 != timeShift_~tmp___9~2#1); 45340#L2352-3 assume 1 == ~doorState~0;~doorState~0 := 0; 45841#L2352-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 45840#L382-73 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 45839#L409-73 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 45838#L2724-4 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 45836#L1964-2 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 37066#L1372-9 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 37067#L1977-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 37983#L2360-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 38652#L2021-3 assume !(1 == ~currentHeading~0); 35659#L2031-9 assume !(0 == ~currentFloorID~0); 35660#L2031-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 37986#L2037-7 assume { :end_inline_continueInDirection } true; 36163#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 43222#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 43221#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 43215#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 43213#L1021-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 43201#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 43172#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 43167#L3285-2 [2022-11-02 20:49:51,837 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:49:51,838 INFO L85 PathProgramCache]: Analyzing trace with hash -1924247499, now seen corresponding path program 2 times [2022-11-02 20:49:51,839 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:49:51,840 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [199998856] [2022-11-02 20:49:51,840 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:49:51,840 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:49:51,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:49:52,000 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:49:52,002 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:49:52,003 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [199998856] [2022-11-02 20:49:52,005 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [199998856] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:49:52,005 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:49:52,006 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:49:52,007 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1713836260] [2022-11-02 20:49:52,007 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:49:52,008 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:49:52,009 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:49:52,010 INFO L85 PathProgramCache]: Analyzing trace with hash -353797275, now seen corresponding path program 1 times [2022-11-02 20:49:52,011 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:49:52,011 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [548719699] [2022-11-02 20:49:52,012 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:49:52,012 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:49:52,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:49:52,118 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:49:52,118 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:49:52,120 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [548719699] [2022-11-02 20:49:52,120 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [548719699] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:49:52,120 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:49:52,121 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:49:52,121 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [525399850] [2022-11-02 20:49:52,121 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:49:52,122 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:49:52,122 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:49:52,122 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-02 20:49:52,123 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-02 20:49:52,123 INFO L87 Difference]: Start difference. First operand 10643 states and 19821 transitions. cyclomatic complexity: 9180 Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:49:52,697 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:49:52,698 INFO L93 Difference]: Finished difference Result 26359 states and 49073 transitions. [2022-11-02 20:49:52,698 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26359 states and 49073 transitions. [2022-11-02 20:49:52,858 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 18489 [2022-11-02 20:49:53,202 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26359 states to 26359 states and 49073 transitions. [2022-11-02 20:49:53,221 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26359 [2022-11-02 20:49:53,257 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26359 [2022-11-02 20:49:53,258 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26359 states and 49073 transitions. [2022-11-02 20:49:53,287 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-02 20:49:53,287 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26359 states and 49073 transitions. [2022-11-02 20:49:53,316 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26359 states and 49073 transitions. [2022-11-02 20:49:53,529 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26359 to 10655. [2022-11-02 20:49:53,667 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10655 states, 10655 states have (on average 1.8613796339746598) internal successors, (19833), 10654 states have internal predecessors, (19833), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:49:53,698 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10655 states to 10655 states and 19833 transitions. [2022-11-02 20:49:53,699 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10655 states and 19833 transitions. [2022-11-02 20:49:53,699 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 20:49:53,700 INFO L428 stractBuchiCegarLoop]: Abstraction has 10655 states and 19833 transitions. [2022-11-02 20:49:53,700 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-11-02 20:49:53,700 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10655 states and 19833 transitions. [2022-11-02 20:49:53,738 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 5383 [2022-11-02 20:49:53,738 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:49:53,739 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:49:53,742 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:49:53,742 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:49:53,743 INFO L748 eck$LassoCheckResult]: Stem: 76020#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 76021#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 72616#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 72617#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 75215#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 75104#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 75105#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 76035#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 75836#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 73814#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 75570#L653 assume 0 == initPersonOnFloor_~floor#1; 75895#L654 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 72959#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 73219#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 72839#L457-2 assume { :end_inline_callOnFloor } true; 73044#L797 assume { :end_inline_initPersonOnFloor } true; 73045#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 73521#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 74606#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 76111#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 73807#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 73808#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 74283#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 76543#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 77037#L2261 assume !(0 != timeShift_~tmp___9~2#1); 77034#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 77033#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 77031#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 76718#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 76283#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 75598#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 75449#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 75450#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 75501#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 75502#L2021 assume !(1 == ~currentHeading~0); 73740#L2031 assume !(0 == ~currentFloorID~0); 73741#L2031-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 74326#L2037-1 assume { :end_inline_continueInDirection } true; 74327#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 75159#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 76164#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 73409#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 80287#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 80279#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 80282#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 80274#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 80272#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 80271#L3285-2 [2022-11-02 20:49:53,743 INFO L750 eck$LassoCheckResult]: Loop: 80271#L3285-2 assume !false; 80270#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 80269#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 80259#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 80258#L3293 assume 1 != cleanup_~tmp___0~12#1; 80255#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 80254#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 80237#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 80220#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 80160#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 80120#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 80119#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 80118#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 79002#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 80117#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 80090#L2109-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 80091#L1372-6 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 81078#L2113-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 74423#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 74424#L2261-2 assume !(0 != timeShift_~tmp___9~2#1); 73940#L2352-3 assume 1 == ~doorState~0;~doorState~0 := 0; 73941#L2352-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 73353#L382-73 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 73354#L409-73 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 74960#L2724-4 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 74961#L1964-2 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 74076#L1372-9 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 74077#L1977-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 75001#L2360-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 75672#L2021-3 assume !(1 == ~currentHeading~0); 72671#L2031-9 assume !(0 == ~currentFloorID~0); 72672#L2031-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 75004#L2037-7 assume { :end_inline_continueInDirection } true; 73174#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 75324#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 75325#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 74040#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 74601#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 74079#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 74080#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 72725#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 80273#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 80271#L3285-2 [2022-11-02 20:49:53,747 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:49:53,747 INFO L85 PathProgramCache]: Analyzing trace with hash 1929156568, now seen corresponding path program 1 times [2022-11-02 20:49:53,747 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:49:53,748 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [598380750] [2022-11-02 20:49:53,748 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:49:53,748 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:49:53,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:49:53,838 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:49:53,838 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:49:53,838 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [598380750] [2022-11-02 20:49:53,839 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [598380750] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:49:53,839 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:49:53,839 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:49:53,839 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [42243096] [2022-11-02 20:49:53,840 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:49:53,840 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:49:53,840 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:49:53,840 INFO L85 PathProgramCache]: Analyzing trace with hash -696385528, now seen corresponding path program 1 times [2022-11-02 20:49:53,841 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:49:53,841 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1593678536] [2022-11-02 20:49:53,841 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:49:53,841 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:49:53,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:49:53,860 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:49:53,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:49:53,918 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:49:55,920 INFO L210 LassoAnalysis]: Preferences: [2022-11-02 20:49:55,921 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-11-02 20:49:55,921 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-11-02 20:49:55,921 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-11-02 20:49:55,922 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-11-02 20:49:55,922 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:55,922 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-11-02 20:49:55,922 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-11-02 20:49:55,922 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec9_product31.cil.c_Iteration3_Loop [2022-11-02 20:49:55,922 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-11-02 20:49:55,923 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-11-02 20:49:55,956 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:55,973 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:55,976 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:55,978 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:55,986 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:55,989 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:55,991 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:55,994 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:55,996 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:55,999 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,014 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,021 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,024 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,029 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,031 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,044 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,047 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,050 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,052 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,054 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,056 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,063 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,068 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,070 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,077 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,080 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,082 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,084 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,091 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,093 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,112 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,117 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,119 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,128 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,130 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,133 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,136 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,140 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,145 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,151 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,153 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,155 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,157 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,163 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,165 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,167 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,169 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,180 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,182 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,184 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,187 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,189 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,193 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,195 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,197 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,206 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,208 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,214 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,216 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,218 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,221 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:56,940 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-11-02 20:49:56,941 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-11-02 20:49:56,943 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:56,943 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:56,950 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:56,962 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:56,962 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:56,975 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2022-11-02 20:49:56,988 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:56,988 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret12#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret12#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:57,021 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Ended with exit code 0 [2022-11-02 20:49:57,022 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:57,022 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:57,024 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:57,026 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2022-11-02 20:49:57,027 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:57,027 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:57,039 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:57,039 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret21#1=0} Honda state: {ULTIMATE.start_isIdle_#t~ret21#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:57,072 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:57,073 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:57,073 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:57,074 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:57,075 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2022-11-02 20:49:57,075 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:57,076 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:57,101 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:57,101 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp~16#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp~16#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:57,138 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:57,139 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:57,139 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:57,159 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:57,172 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:57,172 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:57,187 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2022-11-02 20:49:57,203 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:57,203 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~retValue_acc~16#1=1, ULTIMATE.start_timeShift_~tmp___8~2#1=1, ULTIMATE.start_stopRequestedInDirection_#res#1=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~retValue_acc~16#1=1, ULTIMATE.start_timeShift_~tmp___8~2#1=1, ULTIMATE.start_stopRequestedInDirection_#res#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:57,241 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:57,241 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:57,241 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:57,242 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:57,248 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:57,249 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:57,253 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2022-11-02 20:49:57,261 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:57,261 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~6#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~6#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:57,287 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:57,287 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:57,287 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:57,288 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:57,289 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2022-11-02 20:49:57,291 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:57,291 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:57,302 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:57,302 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret62#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret62#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:57,330 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:57,331 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:57,331 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:57,332 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:57,369 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2022-11-02 20:49:57,376 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:57,376 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:57,402 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:57,403 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret48#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret48#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:57,441 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:57,441 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:57,441 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:57,442 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:57,446 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2022-11-02 20:49:57,447 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:57,447 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:57,483 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:57,483 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~11#1=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~11#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:57,517 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:57,517 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:57,517 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:57,519 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:57,526 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:57,526 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:57,537 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2022-11-02 20:49:57,538 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:57,539 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret71#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret71#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:57,562 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Ended with exit code 0 [2022-11-02 20:49:57,563 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:57,563 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:57,564 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:57,565 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2022-11-02 20:49:57,566 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:57,566 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:57,595 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:57,595 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~5#1=-8, ~calls_0~0=-8, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~23#1=-8, ULTIMATE.start_isFloorCalling_#res#1=-8, ULTIMATE.start_anyStopRequested_~tmp___3~0#1=-8, ULTIMATE.start_isExecutiveFloorCalling_#res#1=-8, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~14#1=-8, ULTIMATE.start_isFloorCalling_~retValue_acc~3#1=-8} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~5#1=-8, ~calls_0~0=-8, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~23#1=-8, ULTIMATE.start_isFloorCalling_#res#1=-8, ULTIMATE.start_anyStopRequested_~tmp___3~0#1=-8, ULTIMATE.start_isExecutiveFloorCalling_#res#1=-8, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~14#1=-8, ULTIMATE.start_isFloorCalling_~retValue_acc~3#1=-8} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:57,638 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:57,638 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:57,639 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:57,640 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:57,642 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2022-11-02 20:49:57,643 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:57,643 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:57,670 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:57,670 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_~tmp~7#1=1, ULTIMATE.start_anyStopRequested_#res#1=1, ULTIMATE.start_anyStopRequested_~retValue_acc~12#1=1} Honda state: {ULTIMATE.start_isIdle_~tmp~7#1=1, ULTIMATE.start_anyStopRequested_#res#1=1, ULTIMATE.start_anyStopRequested_~retValue_acc~12#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:57,707 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:57,707 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:57,707 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:57,708 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:57,712 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2022-11-02 20:49:57,713 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:57,713 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:57,724 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:57,725 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret11#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret11#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:57,748 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:57,748 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:57,748 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:57,749 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:57,750 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2022-11-02 20:49:57,752 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:57,754 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:57,772 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:57,772 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls#1=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls#1=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:57,794 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:57,794 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:57,794 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:57,795 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:57,796 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2022-11-02 20:49:57,798 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:57,798 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:57,814 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:57,814 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret20#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret20#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:57,836 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:57,836 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:57,837 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:57,838 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:57,839 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2022-11-02 20:49:57,839 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:57,839 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:57,861 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:57,861 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#in~dir#1=6, ULTIMATE.start_stopRequestedInDirection_#in~dir#1=6, ULTIMATE.start_continueInDirection_~dir#1=6, ULTIMATE.start_stopRequestedInDirection_~dir#1=6, ~currentHeading~0=6} Honda state: {ULTIMATE.start_continueInDirection_#in~dir#1=6, ULTIMATE.start_stopRequestedInDirection_#in~dir#1=6, ULTIMATE.start_continueInDirection_~dir#1=6, ULTIMATE.start_stopRequestedInDirection_~dir#1=6, ~currentHeading~0=6} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:57,887 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:57,887 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:57,887 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:57,888 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:57,894 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2022-11-02 20:49:57,898 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:57,899 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:57,910 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:57,910 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret47#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret47#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:57,932 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:57,933 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:57,933 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:57,934 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:57,935 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2022-11-02 20:49:57,936 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:57,936 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:57,948 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:57,949 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~2#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~2#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:57,972 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:57,972 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:57,972 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:57,973 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:57,975 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2022-11-02 20:49:57,975 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:57,975 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:57,987 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:57,987 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___0~10#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___0~10#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:58,025 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:58,026 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:58,026 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:58,027 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:58,043 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:58,044 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:58,057 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2022-11-02 20:49:58,066 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:58,067 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret132#1=0} Honda state: {ULTIMATE.start_cleanup_#t~ret132#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:58,094 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:58,094 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:58,095 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:58,095 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:58,098 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:58,099 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:58,101 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2022-11-02 20:49:58,110 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:58,110 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp~6#1=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp~6#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:58,135 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:58,136 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:58,136 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:58,137 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:58,142 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2022-11-02 20:49:58,143 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:58,143 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:58,161 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:58,162 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~20#1=0, ULTIMATE.start_timeShift_~tmp___9~2#1=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~20#1=0, ULTIMATE.start_timeShift_~tmp___9~2#1=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:58,187 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Ended with exit code 0 [2022-11-02 20:49:58,187 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:58,188 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:58,188 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:58,190 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2022-11-02 20:49:58,190 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:58,190 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:58,208 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:58,208 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0#1=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~1#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0#1=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~1#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:58,231 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Ended with exit code 0 [2022-11-02 20:49:58,232 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:58,232 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:58,233 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:58,234 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2022-11-02 20:49:58,242 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:58,242 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:58,257 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-02 20:49:58,257 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret37#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret37#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-02 20:49:58,277 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Ended with exit code 0 [2022-11-02 20:49:58,278 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:58,278 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:58,279 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:58,280 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2022-11-02 20:49:58,280 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:58,282 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:58,314 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:58,314 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:58,314 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:58,315 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:58,316 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2022-11-02 20:49:58,317 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-11-02 20:49:58,317 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:58,964 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-11-02 20:49:58,970 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:58,973 INFO L210 LassoAnalysis]: Preferences: [2022-11-02 20:49:58,973 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-11-02 20:49:58,973 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-11-02 20:49:58,973 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-11-02 20:49:58,973 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-11-02 20:49:58,973 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:58,974 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-11-02 20:49:58,974 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-11-02 20:49:58,974 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec9_product31.cil.c_Iteration3_Loop [2022-11-02 20:49:58,974 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-11-02 20:49:58,974 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-11-02 20:49:58,980 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:58,989 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:58,996 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,003 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,006 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,008 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,012 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,015 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,017 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,019 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,026 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,040 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,043 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,049 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,055 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,057 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,069 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,090 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,093 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,101 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,103 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,106 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,108 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,114 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,117 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,125 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,133 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,141 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,144 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,147 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,150 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,153 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,155 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,158 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,160 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,166 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,169 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,172 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,174 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,177 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,179 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,182 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,184 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,186 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,189 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,191 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,193 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,195 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,201 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,203 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,206 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,208 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,210 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,213 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,215 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,225 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,232 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,234 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,236 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,238 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,240 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:59,996 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-11-02 20:50:00,010 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-11-02 20:50:00,013 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:00,013 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:00,014 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:00,020 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:50:00,030 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2022-11-02 20:50:00,034 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:50:00,034 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:50:00,035 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:50:00,035 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:50:00,035 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:50:00,037 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:50:00,037 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:50:00,054 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-02 20:50:00,090 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Forceful destruction successful, exit code 0 [2022-11-02 20:50:00,091 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:00,091 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:00,092 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:00,094 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:50:00,106 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:50:00,106 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:50:00,106 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:50:00,106 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:50:00,106 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:50:00,108 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:50:00,108 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:50:00,110 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2022-11-02 20:50:00,122 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-02 20:50:00,156 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Forceful destruction successful, exit code 0 [2022-11-02 20:50:00,156 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:00,157 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:00,157 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:00,160 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:50:00,171 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:50:00,171 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:50:00,171 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:50:00,171 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:50:00,172 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:50:00,172 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:50:00,172 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:50:00,174 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2022-11-02 20:50:00,186 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-02 20:50:00,223 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Forceful destruction successful, exit code 0 [2022-11-02 20:50:00,223 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:00,223 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:00,224 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:00,226 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:50:00,238 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:50:00,238 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:50:00,238 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:50:00,239 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:50:00,239 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:50:00,239 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:50:00,239 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:50:00,241 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2022-11-02 20:50:00,258 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-02 20:50:00,294 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Forceful destruction successful, exit code 0 [2022-11-02 20:50:00,295 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:00,295 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:00,296 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:00,299 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:50:00,311 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:50:00,311 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:50:00,312 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:50:00,312 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:50:00,312 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:50:00,314 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:50:00,315 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:50:00,316 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Waiting until timeout for monitored process [2022-11-02 20:50:00,330 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-02 20:50:00,366 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Forceful destruction successful, exit code 0 [2022-11-02 20:50:00,366 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:00,367 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:00,367 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:00,370 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:50:00,383 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:50:00,383 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:50:00,383 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:50:00,383 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:50:00,383 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:50:00,386 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Waiting until timeout for monitored process [2022-11-02 20:50:00,388 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:50:00,389 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:50:00,402 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-02 20:50:00,441 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Forceful destruction successful, exit code 0 [2022-11-02 20:50:00,441 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:00,441 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:00,443 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:00,449 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:50:00,461 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:50:00,462 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:50:00,462 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:50:00,462 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:50:00,462 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:50:00,463 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:50:00,463 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:50:00,468 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Waiting until timeout for monitored process [2022-11-02 20:50:00,481 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-02 20:50:00,520 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Forceful destruction successful, exit code 0 [2022-11-02 20:50:00,520 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:00,520 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:00,521 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:00,524 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:50:00,536 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:50:00,536 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:50:00,536 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:50:00,536 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:50:00,537 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:50:00,537 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:50:00,537 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:50:00,538 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Waiting until timeout for monitored process [2022-11-02 20:50:00,546 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-02 20:50:00,579 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Forceful destruction successful, exit code 0 [2022-11-02 20:50:00,579 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:00,579 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:00,582 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:00,584 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:50:00,594 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Waiting until timeout for monitored process [2022-11-02 20:50:00,596 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:50:00,596 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:50:00,597 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:50:00,597 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:50:00,597 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:50:00,597 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:50:00,597 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:50:00,614 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-02 20:50:00,653 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Forceful destruction successful, exit code 0 [2022-11-02 20:50:00,654 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:00,654 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:00,655 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:00,658 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:50:00,670 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:50:00,670 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:50:00,670 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:50:00,670 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:50:00,671 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:50:00,673 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:50:00,673 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:50:00,674 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Waiting until timeout for monitored process [2022-11-02 20:50:00,683 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-02 20:50:00,720 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Forceful destruction successful, exit code 0 [2022-11-02 20:50:00,721 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:00,721 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:00,722 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:00,724 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:50:00,737 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:50:00,738 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:50:00,738 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:50:00,738 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2022-11-02 20:50:00,738 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:50:00,739 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Waiting until timeout for monitored process [2022-11-02 20:50:00,745 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2022-11-02 20:50:00,746 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:50:00,758 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-02 20:50:00,794 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Forceful destruction successful, exit code 0 [2022-11-02 20:50:00,795 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:00,795 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:00,796 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:00,798 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:50:00,810 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:50:00,811 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:50:00,811 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:50:00,811 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:50:00,811 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:50:00,812 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:50:00,812 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:50:00,813 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Waiting until timeout for monitored process [2022-11-02 20:50:00,826 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-02 20:50:00,864 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Forceful destruction successful, exit code 0 [2022-11-02 20:50:00,865 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:00,865 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:00,866 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:00,870 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:50:00,882 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:50:00,882 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:50:00,882 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:50:00,883 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:50:00,883 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:50:00,884 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:50:00,884 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:50:00,886 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Waiting until timeout for monitored process [2022-11-02 20:50:00,896 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-02 20:50:00,933 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Forceful destruction successful, exit code 0 [2022-11-02 20:50:00,933 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:00,933 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:00,935 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:00,938 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:50:00,950 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:50:00,950 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:50:00,950 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:50:00,951 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:50:00,951 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:50:00,952 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:50:00,952 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:50:00,953 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Waiting until timeout for monitored process [2022-11-02 20:50:00,966 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-02 20:50:01,004 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Forceful destruction successful, exit code 0 [2022-11-02 20:50:01,005 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:01,005 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:01,006 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:01,009 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:50:01,022 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:50:01,022 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:50:01,022 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:50:01,022 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:50:01,022 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:50:01,024 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:50:01,024 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:50:01,025 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Waiting until timeout for monitored process [2022-11-02 20:50:01,034 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-02 20:50:01,072 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Forceful destruction successful, exit code 0 [2022-11-02 20:50:01,073 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:01,073 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:01,074 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:01,076 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:50:01,088 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Waiting until timeout for monitored process [2022-11-02 20:50:01,089 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:50:01,089 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:50:01,089 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:50:01,089 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2022-11-02 20:50:01,089 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:50:01,093 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2022-11-02 20:50:01,093 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:50:01,105 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-02 20:50:01,125 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Ended with exit code 0 [2022-11-02 20:50:01,126 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:01,126 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:01,127 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:01,129 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Waiting until timeout for monitored process [2022-11-02 20:50:01,129 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:50:01,139 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:50:01,139 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:50:01,140 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:50:01,140 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:50:01,140 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:50:01,143 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:50:01,143 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:50:01,155 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-11-02 20:50:01,163 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2022-11-02 20:50:01,163 INFO L444 ModelExtractionUtils]: 6 out of 10 variables were initially zero. Simplification set additionally 2 variables to zero. [2022-11-02 20:50:01,165 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:50:01,165 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:50:01,166 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:50:01,180 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-11-02 20:50:01,180 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-11-02 20:50:01,180 INFO L513 LassoAnalysis]: Proved termination. [2022-11-02 20:50:01,180 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2022-11-02 20:50:01,194 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Waiting until timeout for monitored process [2022-11-02 20:50:01,218 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Forceful destruction successful, exit code 0 [2022-11-02 20:50:01,220 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-11-02 20:50:01,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:01,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:01,357 INFO L263 TraceCheckSpWp]: Trace formula consists of 613 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-02 20:50:01,361 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:50:01,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:01,476 INFO L263 TraceCheckSpWp]: Trace formula consists of 163 conjuncts, 30 conjunts are in the unsatisfiable core [2022-11-02 20:50:01,479 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:50:01,998 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:02,003 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 11 loop predicates [2022-11-02 20:50:02,005 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 10655 states and 19833 transitions. cyclomatic complexity: 9180 Second operand has 13 states, 13 states have (on average 6.846153846153846) internal successors, (89), 13 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:03,152 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9eb4a9cc-c13c-457f-bb42-ae2379271782/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Forceful destruction successful, exit code 0 [2022-11-02 20:50:15,352 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 10655 states and 19833 transitions. cyclomatic complexity: 9180. Second operand has 13 states, 13 states have (on average 6.846153846153846) internal successors, (89), 13 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 71394 states and 131819 transitions. Complement of second has 142 states. [2022-11-02 20:50:15,354 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 72 states 1 stem states 69 non-accepting loop states 1 accepting loop states [2022-11-02 20:50:15,355 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 6.846153846153846) internal successors, (89), 13 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:15,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 30193 transitions. [2022-11-02 20:50:15,386 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 72 states and 30193 transitions. Stem has 47 letters. Loop has 42 letters. [2022-11-02 20:50:15,389 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-02 20:50:15,389 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 72 states and 30193 transitions. Stem has 89 letters. Loop has 42 letters. [2022-11-02 20:50:15,390 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-02 20:50:15,390 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 72 states and 30193 transitions. Stem has 47 letters. Loop has 84 letters. [2022-11-02 20:50:15,392 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-02 20:50:15,393 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 71394 states and 131819 transitions. [2022-11-02 20:50:15,742 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 22422 [2022-11-02 20:50:16,001 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 71394 states to 66011 states and 121642 transitions. [2022-11-02 20:50:16,001 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38328 [2022-11-02 20:50:16,042 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38333 [2022-11-02 20:50:16,042 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66011 states and 121642 transitions. [2022-11-02 20:50:16,063 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:50:16,063 INFO L218 hiAutomatonCegarLoop]: Abstraction has 66011 states and 121642 transitions. [2022-11-02 20:50:16,108 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66011 states and 121642 transitions. [2022-11-02 20:50:16,621 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66011 to 27152. [2022-11-02 20:50:16,669 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27152 states, 27152 states have (on average 1.8509133765468473) internal successors, (50256), 27151 states have internal predecessors, (50256), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:16,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27152 states to 27152 states and 50256 transitions. [2022-11-02 20:50:16,725 INFO L240 hiAutomatonCegarLoop]: Abstraction has 27152 states and 50256 transitions. [2022-11-02 20:50:16,725 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:50:16,726 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:50:16,726 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:50:16,726 INFO L87 Difference]: Start difference. First operand 27152 states and 50256 transitions. Second operand has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:17,141 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:50:17,141 INFO L93 Difference]: Finished difference Result 27152 states and 50250 transitions. [2022-11-02 20:50:17,142 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27152 states and 50250 transitions. [2022-11-02 20:50:17,287 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 11222 [2022-11-02 20:50:17,410 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27152 states to 27152 states and 50250 transitions. [2022-11-02 20:50:17,410 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18902 [2022-11-02 20:50:17,431 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18902 [2022-11-02 20:50:17,432 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27152 states and 50250 transitions. [2022-11-02 20:50:17,453 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:50:17,453 INFO L218 hiAutomatonCegarLoop]: Abstraction has 27152 states and 50250 transitions. [2022-11-02 20:50:17,474 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27152 states and 50250 transitions. [2022-11-02 20:50:17,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27152 to 27152. [2022-11-02 20:50:18,030 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27152 states, 27152 states have (on average 1.8506923983500294) internal successors, (50250), 27151 states have internal predecessors, (50250), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:18,090 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27152 states to 27152 states and 50250 transitions. [2022-11-02 20:50:18,091 INFO L240 hiAutomatonCegarLoop]: Abstraction has 27152 states and 50250 transitions. [2022-11-02 20:50:18,091 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 20:50:18,092 INFO L428 stractBuchiCegarLoop]: Abstraction has 27152 states and 50250 transitions. [2022-11-02 20:50:18,092 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-11-02 20:50:18,092 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27152 states and 50250 transitions. [2022-11-02 20:50:18,180 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 11222 [2022-11-02 20:50:18,180 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:50:18,180 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:50:18,183 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:18,183 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:18,184 INFO L748 eck$LassoCheckResult]: Stem: 214805#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 214806#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 209562#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 209563#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 213528#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 213359#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 213360#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 214830#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 214486#L95 assume !(0 == getOrigin_~person#1); 211357#L99 assume !(1 == getOrigin_~person#1); 211358#L103 assume !(2 == getOrigin_~person#1); 215719#L107 assume !(3 == getOrigin_~person#1); 215001#L111 assume !(4 == getOrigin_~person#1); 214302#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 214088#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 214089#L653 assume 0 == initPersonOnFloor_~floor#1; 214586#L654 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 210053#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 210456#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 209882#L457-2 assume { :end_inline_callOnFloor } true; 210186#L797 assume { :end_inline_initPersonOnFloor } true; 210187#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 210914#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 212569#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 214979#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 211346#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 211348#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 212094#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 213297#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 209650#L2261 assume !(0 != timeShift_~tmp___9~2#1); 209651#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 215456#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 211812#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 211813#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 215294#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 214139#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 213890#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 213891#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 216863#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 216855#L2021 assume !(1 == ~currentHeading~0); 216848#L2031 assume !(0 == ~currentFloorID~0); 216843#L2031-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 212157#L2037-1 assume { :end_inline_continueInDirection } true; 212158#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 218811#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 218805#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 215807#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 218781#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 218549#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 213934#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 209591#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 211919#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 211920#L3285-2 assume !false; 218860#L3286 [2022-11-02 20:50:18,186 INFO L750 eck$LassoCheckResult]: Loop: 218860#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 230343#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 230342#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 230341#L3293 assume 1 != cleanup_~tmp___0~12#1; 214173#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 212486#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 212487#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 214747#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 210570#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 215467#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 215468#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 223497#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 223316#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 223496#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 223494#L2109-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 223493#L1372-6 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 223491#L2113-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 215588#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 224465#L2261-2 assume !(0 != timeShift_~tmp___9~2#1); 211551#L2352-3 assume 1 == ~doorState~0;~doorState~0 := 0; 211552#L2352-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 210656#L382-73 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 210657#L409-73 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 213131#L2724-4 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 213132#L1964-2 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 213791#L1372-9 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 235143#L1977-2 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 235141#L2360-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 235142#L2021-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 233376#L956-12 continueInDirection_#t~ret40#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret40#1;havoc continueInDirection_#t~ret40#1; 233374#L2025-9 assume 0 != continueInDirection_~tmp~11#1;~currentHeading~0 := 0; 233373#L2031-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 226462#L2037-7 assume { :end_inline_continueInDirection } true; 224677#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 226460#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 226459#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 226453#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 226100#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 226101#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 215359#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 209711#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 230345#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 230344#L3285-2 assume !false; 218860#L3286 [2022-11-02 20:50:18,187 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:18,187 INFO L85 PathProgramCache]: Analyzing trace with hash -503275981, now seen corresponding path program 1 times [2022-11-02 20:50:18,187 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:18,188 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2044808330] [2022-11-02 20:50:18,188 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:18,188 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:18,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:18,431 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:18,431 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:18,432 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2044808330] [2022-11-02 20:50:18,432 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2044808330] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:18,432 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:18,432 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 20:50:18,432 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2016179107] [2022-11-02 20:50:18,432 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:18,434 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:50:18,434 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:18,434 INFO L85 PathProgramCache]: Analyzing trace with hash -389079207, now seen corresponding path program 1 times [2022-11-02 20:50:18,434 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:18,434 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [88364643] [2022-11-02 20:50:18,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:18,435 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:18,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:18,757 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:18,757 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:18,758 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [88364643] [2022-11-02 20:50:18,758 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [88364643] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:18,758 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:18,758 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-11-02 20:50:18,758 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [926198708] [2022-11-02 20:50:18,759 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:18,759 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:50:18,759 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:50:18,760 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-02 20:50:18,760 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2022-11-02 20:50:18,760 INFO L87 Difference]: Start difference. First operand 27152 states and 50250 transitions. cyclomatic complexity: 23105 Second operand has 11 states, 11 states have (on average 3.909090909090909) internal successors, (43), 11 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:33,416 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:50:33,416 INFO L93 Difference]: Finished difference Result 225660 states and 417153 transitions. [2022-11-02 20:50:33,417 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 225660 states and 417153 transitions. [2022-11-02 20:50:34,594 INFO L131 ngComponentsAnalysis]: Automaton has 36 accepting balls. 120180 [2022-11-02 20:50:35,898 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 225660 states to 225660 states and 417153 transitions. [2022-11-02 20:50:35,899 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 149224 [2022-11-02 20:50:36,024 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 149224 [2022-11-02 20:50:36,024 INFO L73 IsDeterministic]: Start isDeterministic. Operand 225660 states and 417153 transitions. [2022-11-02 20:50:36,037 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:50:36,037 INFO L218 hiAutomatonCegarLoop]: Abstraction has 225660 states and 417153 transitions. [2022-11-02 20:50:36,218 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 225660 states and 417153 transitions. [2022-11-02 20:50:37,708 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 225660 to 41869. [2022-11-02 20:50:37,750 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41869 states, 41869 states have (on average 1.8446344550861018) internal successors, (77233), 41868 states have internal predecessors, (77233), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:37,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41869 states to 41869 states and 77233 transitions. [2022-11-02 20:50:37,845 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41869 states and 77233 transitions. [2022-11-02 20:50:37,845 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 69 states. [2022-11-02 20:50:37,848 INFO L428 stractBuchiCegarLoop]: Abstraction has 41869 states and 77233 transitions. [2022-11-02 20:50:37,848 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-11-02 20:50:37,848 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41869 states and 77233 transitions. [2022-11-02 20:50:37,956 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:37,956 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:50:37,957 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:50:37,959 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:37,959 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:37,959 INFO L748 eck$LassoCheckResult]: Stem: 467872#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 467873#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 462535#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 462536#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 466544#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 466381#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 466382#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 467898#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 467533#L95 assume !(0 == getOrigin_~person#1); 464340#L99 assume !(1 == getOrigin_~person#1); 464341#L103 assume !(2 == getOrigin_~person#1); 468795#L107 assume !(3 == getOrigin_~person#1); 468079#L111 assume !(4 == getOrigin_~person#1); 467351#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 467124#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 467125#L653 assume 0 == initPersonOnFloor_~floor#1; 467637#L654 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 463030#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 463425#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 462856#L457-2 assume { :end_inline_callOnFloor } true; 463160#L797 assume { :end_inline_initPersonOnFloor } true; 463161#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 463891#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 465576#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 468058#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 464332#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 464333#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 468865#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 468866#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 462623#L2261 assume !(0 != timeShift_~tmp___9~2#1); 462624#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 468665#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 468666#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 469531#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 469530#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 469529#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 466919#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 466920#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 467008#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 467009#L2021 assume !(1 == ~currentHeading~0); 464225#L2031 assume !(0 == ~currentFloorID~0); 464226#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 472048#L2037-1 assume { :end_inline_continueInDirection } true; 472044#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 472042#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 472040#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 472031#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 472035#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 472004#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 472007#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 471996#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 471994#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 471991#L3285-2 assume !false; 471992#L3286 [2022-11-02 20:50:37,960 INFO L750 eck$LassoCheckResult]: Loop: 471992#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 492234#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 492233#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 492232#L3293 assume 1 != cleanup_~tmp___0~12#1; 492227#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 492222#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 492211#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 492203#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 492194#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 492193#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 492192#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 492191#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 489770#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 492190#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 492187#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 492188#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 492859#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 492851#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 492845#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 492840#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 492839#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 492832#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 492829#L2263-2 assume !(0 != ~persons_0~0); 492787#L2263-3 assume !(0 != ~persons_1~0); 492782#L2277-1 assume !(0 != ~persons_2~0); 492761#L2291-1 assume !(0 != ~persons_3~0); 492759#L2305-1 assume !(0 != ~persons_4~0); 492723#L2319-1 assume !(0 != ~persons_5~0); 492722#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 492721#L473-12 assume 0 == isPersonOnFloor_~floor#1; 492694#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 492680#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 492678#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 492676#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 492675#L473-14 assume 0 == isPersonOnFloor_~floor#1; 492567#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 492565#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 492563#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 492561#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 492560#L473-16 assume 0 == isPersonOnFloor_~floor#1; 492459#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 492437#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 492435#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 492433#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 492432#L473-18 assume 0 == isPersonOnFloor_~floor#1; 492400#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 492389#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 492387#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 492384#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 492383#L473-20 assume 0 == isPersonOnFloor_~floor#1; 492373#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 492335#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 492326#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 492324#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 492323#L473-22 assume 0 == isPersonOnFloor_~floor#1; 492304#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 492280#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 492277#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 492275#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 492274#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 492269#L429-41 assume { :end_inline_resetCallOnFloor } true; 492268#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 492266#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 492262#L1355-5 assume { :end_inline_resetFloorButton } true; 492261#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 492260#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 492259#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 492254#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 492252#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 492250#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 492241#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 492237#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 492236#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 492235#L3285-2 assume !false; 471992#L3286 [2022-11-02 20:50:37,961 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:37,961 INFO L85 PathProgramCache]: Analyzing trace with hash -761441419, now seen corresponding path program 1 times [2022-11-02 20:50:37,961 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:37,961 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [326995387] [2022-11-02 20:50:37,962 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:37,962 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:37,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:38,076 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:38,076 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:38,077 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [326995387] [2022-11-02 20:50:38,077 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [326995387] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:38,077 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:38,077 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 20:50:38,077 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1807504340] [2022-11-02 20:50:38,078 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:38,078 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:50:38,078 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:38,078 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 1 times [2022-11-02 20:50:38,079 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:38,079 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [904618472] [2022-11-02 20:50:38,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:38,079 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:38,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:38,181 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:38,181 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:38,181 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [904618472] [2022-11-02 20:50:38,182 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [904618472] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:38,182 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:38,182 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 20:50:38,182 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1370636041] [2022-11-02 20:50:38,182 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:38,183 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:50:38,183 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:50:38,183 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:50:38,183 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:50:38,184 INFO L87 Difference]: Start difference. First operand 41869 states and 77233 transitions. cyclomatic complexity: 35379 Second operand has 6 states, 6 states have (on average 8.833333333333334) internal successors, (53), 6 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:38,723 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:50:38,723 INFO L93 Difference]: Finished difference Result 41863 states and 77220 transitions. [2022-11-02 20:50:38,723 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41863 states and 77220 transitions. [2022-11-02 20:50:38,899 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:39,040 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41863 states to 41863 states and 77220 transitions. [2022-11-02 20:50:39,040 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28330 [2022-11-02 20:50:39,063 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28330 [2022-11-02 20:50:39,063 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41863 states and 77220 transitions. [2022-11-02 20:50:39,092 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:50:39,092 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41863 states and 77220 transitions. [2022-11-02 20:50:39,418 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41863 states and 77220 transitions. [2022-11-02 20:50:39,976 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41863 to 41863. [2022-11-02 20:50:40,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41863 states, 41863 states have (on average 1.8445882999307264) internal successors, (77220), 41862 states have internal predecessors, (77220), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:40,143 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41863 states to 41863 states and 77220 transitions. [2022-11-02 20:50:40,144 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41863 states and 77220 transitions. [2022-11-02 20:50:40,144 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-02 20:50:40,145 INFO L428 stractBuchiCegarLoop]: Abstraction has 41863 states and 77220 transitions. [2022-11-02 20:50:40,146 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-11-02 20:50:40,146 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41863 states and 77220 transitions. [2022-11-02 20:50:40,296 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:40,296 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:50:40,297 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:50:40,301 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:40,302 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:40,302 INFO L748 eck$LassoCheckResult]: Stem: 551529#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 551530#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 546289#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 546290#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 550258#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 550088#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 550089#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 551551#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 551217#L95 assume !(0 == getOrigin_~person#1); 548070#L99 assume !(1 == getOrigin_~person#1); 548071#L103 assume !(2 == getOrigin_~person#1); 552404#L107 assume !(3 == getOrigin_~person#1); 551717#L111 assume !(4 == getOrigin_~person#1); 551027#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 550816#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 550817#L653 assume !(0 == initPersonOnFloor_~floor#1); 550940#L680 assume 1 == initPersonOnFloor_~floor#1; 547653#L681 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 546780#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 547183#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 546609#L457-2 assume { :end_inline_callOnFloor } true; 546913#L797 assume { :end_inline_initPersonOnFloor } true; 546914#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 547636#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 549291#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 551691#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 548062#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 548063#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 548809#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 550022#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 546377#L2261 assume !(0 != timeShift_~tmp___9~2#1); 546378#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 552145#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 548532#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 548533#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 551999#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 550866#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 550622#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 550623#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 550706#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 550707#L2021 assume !(1 == ~currentHeading~0); 547962#L2031 assume !(0 == ~currentFloorID~0); 547963#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 555025#L2037-1 assume { :end_inline_continueInDirection } true; 560599#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 560598#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 560596#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 560591#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 560592#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 560582#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 560585#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 560575#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 548639#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 548640#L3285-2 assume !false; 564432#L3286 [2022-11-02 20:50:40,303 INFO L750 eck$LassoCheckResult]: Loop: 564432#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 574434#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 574433#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 574432#L3293 assume 1 != cleanup_~tmp___0~12#1; 574431#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 574430#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 574256#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 574211#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 574199#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 574197#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 574191#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 574188#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 574180#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 574179#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 574163#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 574164#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 574171#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 574127#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 574117#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 574114#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 574100#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 574093#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 574094#L2263-2 assume !(0 != ~persons_0~0); 575376#L2263-3 assume !(0 != ~persons_1~0); 575371#L2277-1 assume !(0 != ~persons_2~0); 575333#L2291-1 assume !(0 != ~persons_3~0); 575326#L2305-1 assume !(0 != ~persons_4~0); 575313#L2319-1 assume !(0 != ~persons_5~0); 575311#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 575304#L473-12 assume 0 == isPersonOnFloor_~floor#1; 575274#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 575260#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 575258#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 575256#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 575255#L473-14 assume 0 == isPersonOnFloor_~floor#1; 575146#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 575144#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 575142#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 575140#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 575139#L473-16 assume 0 == isPersonOnFloor_~floor#1; 575050#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 575028#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 575026#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 575024#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 575023#L473-18 assume 0 == isPersonOnFloor_~floor#1; 574889#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 574877#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 574875#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 574873#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 574872#L473-20 assume 0 == isPersonOnFloor_~floor#1; 574854#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 574822#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 574820#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 574818#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 574817#L473-22 assume 0 == isPersonOnFloor_~floor#1; 574794#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 574775#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 574773#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 574771#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 574770#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 574765#L429-41 assume { :end_inline_resetCallOnFloor } true; 574764#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 574762#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 574753#L1355-5 assume { :end_inline_resetFloorButton } true; 574751#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 574745#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 574497#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 574490#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 574489#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 574455#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 574446#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 574439#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 574437#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 574435#L3285-2 assume !false; 564432#L3286 [2022-11-02 20:50:40,304 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:40,304 INFO L85 PathProgramCache]: Analyzing trace with hash -342341416, now seen corresponding path program 1 times [2022-11-02 20:50:40,304 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:40,304 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [851187269] [2022-11-02 20:50:40,304 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:40,305 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:40,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:40,414 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:40,414 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:40,415 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [851187269] [2022-11-02 20:50:40,415 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [851187269] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:40,415 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:40,415 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:50:40,415 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1844370035] [2022-11-02 20:50:40,416 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:40,416 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:50:40,416 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:40,417 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 2 times [2022-11-02 20:50:40,417 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:40,417 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1994047591] [2022-11-02 20:50:40,417 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:40,417 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:40,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:40,801 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:40,802 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:40,802 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1994047591] [2022-11-02 20:50:40,802 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1994047591] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:40,802 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:40,802 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 20:50:40,802 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1597823164] [2022-11-02 20:50:40,803 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:40,803 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:50:40,803 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:50:40,804 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-02 20:50:40,804 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-02 20:50:40,804 INFO L87 Difference]: Start difference. First operand 41863 states and 77220 transitions. cyclomatic complexity: 35372 Second operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:41,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:50:41,072 INFO L93 Difference]: Finished difference Result 41863 states and 77216 transitions. [2022-11-02 20:50:41,072 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41863 states and 77216 transitions. [2022-11-02 20:50:41,248 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:41,380 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41863 states to 41863 states and 77216 transitions. [2022-11-02 20:50:41,381 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28330 [2022-11-02 20:50:41,405 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28330 [2022-11-02 20:50:41,405 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41863 states and 77216 transitions. [2022-11-02 20:50:41,406 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:50:41,406 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41863 states and 77216 transitions. [2022-11-02 20:50:41,433 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41863 states and 77216 transitions. [2022-11-02 20:50:42,195 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41863 to 41863. [2022-11-02 20:50:42,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41863 states, 41863 states have (on average 1.8444927501612403) internal successors, (77216), 41862 states have internal predecessors, (77216), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:42,334 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41863 states to 41863 states and 77216 transitions. [2022-11-02 20:50:42,334 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41863 states and 77216 transitions. [2022-11-02 20:50:42,334 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-02 20:50:42,337 INFO L428 stractBuchiCegarLoop]: Abstraction has 41863 states and 77216 transitions. [2022-11-02 20:50:42,337 INFO L335 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-11-02 20:50:42,337 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41863 states and 77216 transitions. [2022-11-02 20:50:42,455 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:42,455 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:50:42,455 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:50:42,458 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:42,458 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:42,458 INFO L748 eck$LassoCheckResult]: Stem: 635285#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 635286#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 630030#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 630031#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 634008#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 633839#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 633840#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 635305#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 634975#L95 assume !(0 == getOrigin_~person#1); 631818#L99 assume !(1 == getOrigin_~person#1); 631819#L103 assume !(2 == getOrigin_~person#1); 636143#L107 assume !(3 == getOrigin_~person#1); 635460#L111 assume !(4 == getOrigin_~person#1); 634786#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 634565#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 634566#L653 assume !(0 == initPersonOnFloor_~floor#1); 634696#L680 assume 1 == initPersonOnFloor_~floor#1; 631405#L681 assume !(0 == initPersonOnFloor_~person#1); 631406#L684 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 630532#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 630931#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 630353#L457-2 assume { :end_inline_callOnFloor } true; 630661#L797 assume { :end_inline_initPersonOnFloor } true; 630662#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 631386#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 633041#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 635438#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 631810#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 631811#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 632560#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 633776#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 630119#L2261 assume !(0 != timeShift_~tmp___9~2#1); 630120#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 635883#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 636011#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 636532#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 636531#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 636530#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 636445#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 636440#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 636437#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 636438#L2021 assume !(1 == ~currentHeading~0); 637797#L2031 assume !(0 == ~currentFloorID~0); 633586#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 633587#L2037-1 assume { :end_inline_continueInDirection } true; 643420#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 643417#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 643415#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 643402#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 643412#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 643036#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 643039#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 643029#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 643028#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 641911#L3285-2 assume !false; 641912#L3286 [2022-11-02 20:50:42,459 INFO L750 eck$LassoCheckResult]: Loop: 641912#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 649510#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 649508#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 649506#L3293 assume 1 != cleanup_~tmp___0~12#1; 649504#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 649502#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 649462#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 649435#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 649425#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 649423#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 649421#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 649419#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 648395#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 649415#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 649412#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 649413#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 650252#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 650249#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 650246#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 650244#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 649385#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 650238#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 650235#L2263-2 assume !(0 != ~persons_0~0); 650193#L2263-3 assume !(0 != ~persons_1~0); 650188#L2277-1 assume !(0 != ~persons_2~0); 650167#L2291-1 assume !(0 != ~persons_3~0); 650165#L2305-1 assume !(0 != ~persons_4~0); 650129#L2319-1 assume !(0 != ~persons_5~0); 650128#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 650127#L473-12 assume 0 == isPersonOnFloor_~floor#1; 650087#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 650073#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 650071#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 650069#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 650067#L473-14 assume 0 == isPersonOnFloor_~floor#1; 650010#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 650008#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 649975#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 649972#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 649968#L473-16 assume 0 == isPersonOnFloor_~floor#1; 649942#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 649920#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 649918#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 649910#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 649908#L473-18 assume 0 == isPersonOnFloor_~floor#1; 649877#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 649865#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 649863#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 649861#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 649860#L473-20 assume 0 == isPersonOnFloor_~floor#1; 649840#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 649808#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 649806#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 649804#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 649803#L473-22 assume 0 == isPersonOnFloor_~floor#1; 649679#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 649647#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 649634#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 649595#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 649592#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 649584#L429-41 assume { :end_inline_resetCallOnFloor } true; 649582#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 649575#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 649570#L1355-5 assume { :end_inline_resetFloorButton } true; 649568#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 649562#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 649560#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 649554#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 649551#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 649545#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 649536#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 649531#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 649527#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 649525#L3285-2 assume !false; 641912#L3286 [2022-11-02 20:50:42,459 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:42,460 INFO L85 PathProgramCache]: Analyzing trace with hash -1574810952, now seen corresponding path program 1 times [2022-11-02 20:50:42,460 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:42,460 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [882063118] [2022-11-02 20:50:42,460 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:42,460 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:42,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:42,537 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:42,537 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:42,537 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [882063118] [2022-11-02 20:50:42,537 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [882063118] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:42,537 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:42,538 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:50:42,538 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [176662411] [2022-11-02 20:50:42,538 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:42,538 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:50:42,539 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:42,539 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 3 times [2022-11-02 20:50:42,539 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:42,539 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1539146373] [2022-11-02 20:50:42,539 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:42,539 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:42,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:42,649 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:42,650 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:42,650 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1539146373] [2022-11-02 20:50:42,650 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1539146373] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:42,650 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:42,650 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 20:50:42,650 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1862736425] [2022-11-02 20:50:42,651 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:42,651 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:50:42,651 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:50:42,651 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-02 20:50:42,652 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-02 20:50:42,652 INFO L87 Difference]: Start difference. First operand 41863 states and 77216 transitions. cyclomatic complexity: 35368 Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:43,166 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:50:43,166 INFO L93 Difference]: Finished difference Result 41863 states and 77212 transitions. [2022-11-02 20:50:43,166 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41863 states and 77212 transitions. [2022-11-02 20:50:43,301 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:43,391 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41863 states to 41863 states and 77212 transitions. [2022-11-02 20:50:43,391 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28330 [2022-11-02 20:50:43,408 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28330 [2022-11-02 20:50:43,408 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41863 states and 77212 transitions. [2022-11-02 20:50:43,411 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:50:43,411 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41863 states and 77212 transitions. [2022-11-02 20:50:43,438 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41863 states and 77212 transitions. [2022-11-02 20:50:44,060 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41863 to 41863. [2022-11-02 20:50:44,096 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41863 states, 41863 states have (on average 1.8443972003917541) internal successors, (77212), 41862 states have internal predecessors, (77212), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:44,191 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41863 states to 41863 states and 77212 transitions. [2022-11-02 20:50:44,191 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41863 states and 77212 transitions. [2022-11-02 20:50:44,192 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-02 20:50:44,192 INFO L428 stractBuchiCegarLoop]: Abstraction has 41863 states and 77212 transitions. [2022-11-02 20:50:44,192 INFO L335 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-11-02 20:50:44,192 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41863 states and 77212 transitions. [2022-11-02 20:50:44,302 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:44,302 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:50:44,302 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:50:44,304 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:44,305 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:44,305 INFO L748 eck$LassoCheckResult]: Stem: 719026#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 719027#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 713771#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 713772#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 717757#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 717592#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 717593#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 719048#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 718714#L95 assume !(0 == getOrigin_~person#1); 715554#L99 assume !(1 == getOrigin_~person#1); 715555#L103 assume !(2 == getOrigin_~person#1); 719923#L107 assume !(3 == getOrigin_~person#1); 719210#L111 assume !(4 == getOrigin_~person#1); 718531#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 718314#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 718315#L653 assume !(0 == initPersonOnFloor_~floor#1); 718442#L680 assume 1 == initPersonOnFloor_~floor#1; 715131#L681 assume !(0 == initPersonOnFloor_~person#1); 715132#L684 assume !(1 == initPersonOnFloor_~person#1); 719421#L687 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 714438#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 714659#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 714091#L457-2 assume { :end_inline_callOnFloor } true; 714394#L797 assume { :end_inline_initPersonOnFloor } true; 714395#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 715120#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 716783#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 719189#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 715546#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 715547#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 716301#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 719982#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 720903#L2261 assume !(0 != timeShift_~tmp___9~2#1); 720902#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 720901#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 720884#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 720460#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 720331#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 718364#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 718125#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 718126#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 718202#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 718203#L2021 assume !(1 == ~currentHeading~0); 718833#L2031 assume !(0 == ~currentFloorID~0); 717333#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 717334#L2037-1 assume { :end_inline_continueInDirection } true; 727973#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 727972#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 727970#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 727965#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 727969#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 727628#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 727629#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 727620#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 727618#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 727616#L3285-2 assume !false; 727617#L3286 [2022-11-02 20:50:44,306 INFO L750 eck$LassoCheckResult]: Loop: 727617#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 735292#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 735291#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 735290#L3293 assume 1 != cleanup_~tmp___0~12#1; 735289#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 735284#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 735282#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 735276#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 735267#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 735266#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 735263#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 735260#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 735257#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 735256#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 735249#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 735246#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 735245#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 735237#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 735231#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 735226#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 735225#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 735223#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 735224#L2263-2 assume !(0 != ~persons_0~0); 738380#L2263-3 assume !(0 != ~persons_1~0); 738375#L2277-1 assume !(0 != ~persons_2~0); 738354#L2291-1 assume !(0 != ~persons_3~0); 738352#L2305-1 assume !(0 != ~persons_4~0); 738316#L2319-1 assume !(0 != ~persons_5~0); 738315#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 738314#L473-12 assume 0 == isPersonOnFloor_~floor#1; 738265#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 738251#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 738249#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 738247#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 738245#L473-14 assume 0 == isPersonOnFloor_~floor#1; 738174#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 738161#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 738157#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 738150#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 738148#L473-16 assume 0 == isPersonOnFloor_~floor#1; 738114#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 738092#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 738090#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 738082#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 738080#L473-18 assume 0 == isPersonOnFloor_~floor#1; 738049#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 738037#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 738035#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 738033#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 738031#L473-20 assume 0 == isPersonOnFloor_~floor#1; 737956#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 737924#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 737922#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 737920#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 737919#L473-22 assume 0 == isPersonOnFloor_~floor#1; 735363#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 735344#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 735342#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 735340#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 735339#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 735334#L429-41 assume { :end_inline_resetCallOnFloor } true; 735333#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 735331#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 735327#L1355-5 assume { :end_inline_resetFloorButton } true; 735326#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 735325#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 735324#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 735317#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 735316#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 735313#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 735304#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 735296#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 735294#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 735293#L3285-2 assume !false; 727617#L3286 [2022-11-02 20:50:44,307 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:44,307 INFO L85 PathProgramCache]: Analyzing trace with hash 522167901, now seen corresponding path program 1 times [2022-11-02 20:50:44,307 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:44,307 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1986597056] [2022-11-02 20:50:44,308 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:44,308 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:44,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:44,402 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:44,403 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:44,403 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1986597056] [2022-11-02 20:50:44,403 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1986597056] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:44,403 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:44,404 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:50:44,404 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1037399638] [2022-11-02 20:50:44,404 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:44,404 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:50:44,405 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:44,405 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 4 times [2022-11-02 20:50:44,405 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:44,405 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [17991578] [2022-11-02 20:50:44,405 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:44,406 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:44,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:44,522 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:44,523 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:44,523 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [17991578] [2022-11-02 20:50:44,523 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [17991578] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:44,523 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:44,523 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 20:50:44,524 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [439187836] [2022-11-02 20:50:44,524 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:44,524 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:50:44,524 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:50:44,525 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-02 20:50:44,525 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-02 20:50:44,525 INFO L87 Difference]: Start difference. First operand 41863 states and 77212 transitions. cyclomatic complexity: 35364 Second operand has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:44,847 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:50:44,848 INFO L93 Difference]: Finished difference Result 41863 states and 77208 transitions. [2022-11-02 20:50:44,848 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41863 states and 77208 transitions. [2022-11-02 20:50:45,077 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:45,239 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41863 states to 41863 states and 77208 transitions. [2022-11-02 20:50:45,240 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28330 [2022-11-02 20:50:45,267 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28330 [2022-11-02 20:50:45,267 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41863 states and 77208 transitions. [2022-11-02 20:50:45,281 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:50:45,281 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41863 states and 77208 transitions. [2022-11-02 20:50:45,310 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41863 states and 77208 transitions. [2022-11-02 20:50:46,266 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41863 to 41863. [2022-11-02 20:50:46,295 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41863 states, 41863 states have (on average 1.8443016506222678) internal successors, (77208), 41862 states have internal predecessors, (77208), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:46,361 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41863 states to 41863 states and 77208 transitions. [2022-11-02 20:50:46,362 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41863 states and 77208 transitions. [2022-11-02 20:50:46,362 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-02 20:50:46,363 INFO L428 stractBuchiCegarLoop]: Abstraction has 41863 states and 77208 transitions. [2022-11-02 20:50:46,363 INFO L335 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-11-02 20:50:46,363 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41863 states and 77208 transitions. [2022-11-02 20:50:46,447 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:46,447 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:50:46,447 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:50:46,448 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:46,448 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:46,448 INFO L748 eck$LassoCheckResult]: Stem: 802897#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 802898#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 797512#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 797513#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 801560#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 801376#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 801377#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 802918#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 802560#L95 assume !(0 == getOrigin_~person#1); 799315#L99 assume !(1 == getOrigin_~person#1); 799316#L103 assume !(2 == getOrigin_~person#1); 803848#L107 assume !(3 == getOrigin_~person#1); 803078#L111 assume !(4 == getOrigin_~person#1); 802363#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 802141#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 802142#L653 assume !(0 == initPersonOnFloor_~floor#1); 802269#L680 assume !(1 == initPersonOnFloor_~floor#1); 801276#L707 assume !(2 == initPersonOnFloor_~floor#1); 800519#L734 assume !(3 == initPersonOnFloor_~floor#1); 798607#L761 assume !(4 == initPersonOnFloor_~floor#1); 798191#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 798412#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 797835#L457-2 assume { :end_inline_callOnFloor } true; 798140#L797 assume { :end_inline_initPersonOnFloor } true; 798141#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 798874#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 800562#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 803056#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 799307#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 799308#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 800073#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 803920#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 804431#L2261 assume !(0 != timeShift_~tmp___9~2#1); 804430#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 804428#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 804427#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 804425#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 804315#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 804305#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 804301#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 804298#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 804297#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 802683#L2021 assume !(1 == ~currentHeading~0); 802684#L2031 assume !(0 == ~currentFloorID~0); 801115#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 801116#L2037-1 assume { :end_inline_continueInDirection } true; 801469#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 801470#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 809229#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 798503#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 803047#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 802168#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 802169#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 809192#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 799898#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 799899#L3285-2 assume !false; 815662#L3286 [2022-11-02 20:50:46,449 INFO L750 eck$LassoCheckResult]: Loop: 815662#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 821811#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 821810#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 821809#L3293 assume 1 != cleanup_~tmp___0~12#1; 821808#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 821799#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 821788#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 821780#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 821771#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 821770#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 821769#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 821768#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 820371#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 821767#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 821764#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 821765#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 822437#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 822429#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 822423#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 822418#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 822417#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 822410#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 822407#L2263-2 assume !(0 != ~persons_0~0); 822359#L2263-3 assume !(0 != ~persons_1~0); 822354#L2277-1 assume !(0 != ~persons_2~0); 822333#L2291-1 assume !(0 != ~persons_3~0); 822331#L2305-1 assume !(0 != ~persons_4~0); 822295#L2319-1 assume !(0 != ~persons_5~0); 822294#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 822293#L473-12 assume 0 == isPersonOnFloor_~floor#1; 822271#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 822258#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 822251#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 822248#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 822242#L473-14 assume 0 == isPersonOnFloor_~floor#1; 822115#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 822113#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 822111#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 822109#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 822108#L473-16 assume 0 == isPersonOnFloor_~floor#1; 822087#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 822065#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 822063#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 822061#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 822059#L473-18 assume 0 == isPersonOnFloor_~floor#1; 822035#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 822018#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 821984#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 821981#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 821975#L473-20 assume 0 == isPersonOnFloor_~floor#1; 821960#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 821928#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 821926#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 821924#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 821923#L473-22 assume 0 == isPersonOnFloor_~floor#1; 821881#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 821857#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 821854#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 821852#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 821851#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 821846#L429-41 assume { :end_inline_resetCallOnFloor } true; 821845#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 821843#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 821839#L1355-5 assume { :end_inline_resetFloorButton } true; 821838#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 821837#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 821836#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 821831#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 821829#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 821827#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 821818#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 821814#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 821813#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 821812#L3285-2 assume !false; 815662#L3286 [2022-11-02 20:50:46,449 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:46,449 INFO L85 PathProgramCache]: Analyzing trace with hash -1949605155, now seen corresponding path program 1 times [2022-11-02 20:50:46,449 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:46,449 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1137907638] [2022-11-02 20:50:46,449 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:46,449 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:46,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:46,525 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:46,525 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:46,525 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1137907638] [2022-11-02 20:50:46,525 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1137907638] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:46,526 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:46,526 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:50:46,526 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [166439161] [2022-11-02 20:50:46,526 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:46,526 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:50:46,527 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:46,527 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 5 times [2022-11-02 20:50:46,527 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:46,527 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [341245459] [2022-11-02 20:50:46,527 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:46,528 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:46,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:46,622 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:46,622 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:46,622 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [341245459] [2022-11-02 20:50:46,623 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [341245459] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:46,623 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:46,623 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 20:50:46,623 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [3384147] [2022-11-02 20:50:46,623 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:46,624 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:50:46,624 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:50:46,624 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-02 20:50:46,624 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-02 20:50:46,624 INFO L87 Difference]: Start difference. First operand 41863 states and 77208 transitions. cyclomatic complexity: 35360 Second operand has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:46,830 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:50:46,830 INFO L93 Difference]: Finished difference Result 41842 states and 77174 transitions. [2022-11-02 20:50:46,830 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41842 states and 77174 transitions. [2022-11-02 20:50:47,512 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:47,636 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41842 states to 41842 states and 77174 transitions. [2022-11-02 20:50:47,636 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28309 [2022-11-02 20:50:47,658 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28309 [2022-11-02 20:50:47,658 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41842 states and 77174 transitions. [2022-11-02 20:50:47,659 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:50:47,659 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77174 transitions. [2022-11-02 20:50:47,683 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41842 states and 77174 transitions. [2022-11-02 20:50:48,056 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41842 to 41842. [2022-11-02 20:50:48,092 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41842 states, 41842 states have (on average 1.8444147029300704) internal successors, (77174), 41841 states have internal predecessors, (77174), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:48,155 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41842 states to 41842 states and 77174 transitions. [2022-11-02 20:50:48,155 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77174 transitions. [2022-11-02 20:50:48,155 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-02 20:50:48,156 INFO L428 stractBuchiCegarLoop]: Abstraction has 41842 states and 77174 transitions. [2022-11-02 20:50:48,156 INFO L335 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-11-02 20:50:48,156 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41842 states and 77174 transitions. [2022-11-02 20:50:48,237 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:48,237 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:50:48,237 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:50:48,239 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:48,239 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:48,239 INFO L748 eck$LassoCheckResult]: Stem: 886449#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 886450#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 881233#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 881234#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 885195#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 885034#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 885035#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 886471#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 886137#L95 assume !(0 == getOrigin_~person#1); 883017#L99 assume !(1 == getOrigin_~person#1); 883018#L103 assume !(2 == getOrigin_~person#1); 887372#L107 assume !(3 == getOrigin_~person#1); 886642#L111 assume !(4 == getOrigin_~person#1); 885948#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 885742#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 885743#L653 assume !(0 == initPersonOnFloor_~floor#1); 885864#L680 assume 1 == initPersonOnFloor_~floor#1; 882603#L681 assume !(0 == initPersonOnFloor_~person#1); 882604#L684 assume !(1 == initPersonOnFloor_~person#1); 886858#L687 assume !(2 == initPersonOnFloor_~person#1); 885760#L690 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 885300#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 882126#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 881554#L457-2 assume { :end_inline_callOnFloor } true; 881856#L797 assume { :end_inline_initPersonOnFloor } true; 881857#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 882586#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 884233#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 886615#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 883009#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 883010#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 883753#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 884969#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 881321#L2261 assume !(0 != timeShift_~tmp___9~2#1); 881322#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 887091#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 883475#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 883476#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 886949#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 885788#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 885554#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 885555#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 885637#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 885638#L2021 assume !(1 == ~currentHeading~0); 886249#L2031 assume !(0 == ~currentFloorID~0); 890551#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 890547#L2037-1 assume { :end_inline_continueInDirection } true; 890543#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 890541#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 890537#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 890532#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 890531#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 890452#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 890455#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 890430#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 890424#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 890420#L3285-2 assume !false; 890421#L3286 [2022-11-02 20:50:48,240 INFO L750 eck$LassoCheckResult]: Loop: 890421#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 915024#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 915023#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 915022#L3293 assume 1 != cleanup_~tmp___0~12#1; 915021#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 915020#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 915019#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 914996#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 914987#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 914530#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 914529#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 914528#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 906246#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 914526#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 914523#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 914524#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 915888#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 915880#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 915874#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 915869#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 915868#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 915861#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 915858#L2263-2 assume !(0 != ~persons_0~0); 915810#L2263-3 assume !(0 != ~persons_1~0); 915805#L2277-1 assume !(0 != ~persons_2~0); 915784#L2291-1 assume !(0 != ~persons_3~0); 915782#L2305-1 assume !(0 != ~persons_4~0); 915746#L2319-1 assume !(0 != ~persons_5~0); 915745#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 915744#L473-12 assume 0 == isPersonOnFloor_~floor#1; 915634#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 915620#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 915618#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 915616#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 915615#L473-14 assume 0 == isPersonOnFloor_~floor#1; 915491#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 915489#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 915487#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 915485#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 915484#L473-16 assume 0 == isPersonOnFloor_~floor#1; 915346#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 915324#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 915322#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 915320#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 915319#L473-18 assume 0 == isPersonOnFloor_~floor#1; 915220#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 915208#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 915206#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 915204#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 915203#L473-20 assume 0 == isPersonOnFloor_~floor#1; 915180#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 915148#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 915146#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 915144#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 915143#L473-22 assume 0 == isPersonOnFloor_~floor#1; 915093#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 915074#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 915072#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 915070#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 915069#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 915064#L429-41 assume { :end_inline_resetCallOnFloor } true; 915063#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 915061#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 915057#L1355-5 assume { :end_inline_resetFloorButton } true; 915055#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 915054#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 915053#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 915048#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 915056#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 915045#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 915036#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 915032#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 915031#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 915030#L3285-2 assume !false; 890421#L3286 [2022-11-02 20:50:48,240 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:48,241 INFO L85 PathProgramCache]: Analyzing trace with hash -1542135587, now seen corresponding path program 1 times [2022-11-02 20:50:48,241 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:48,241 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1693135148] [2022-11-02 20:50:48,241 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:48,241 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:48,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:48,563 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:48,563 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:48,564 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1693135148] [2022-11-02 20:50:48,564 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1693135148] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:48,564 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:48,564 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:50:48,564 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1619726537] [2022-11-02 20:50:48,564 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:48,564 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:50:48,565 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:48,565 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 6 times [2022-11-02 20:50:48,565 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:48,565 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1577067194] [2022-11-02 20:50:48,565 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:48,565 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:48,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:48,671 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:48,671 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:48,672 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1577067194] [2022-11-02 20:50:48,672 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1577067194] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:48,672 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:48,672 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 20:50:48,672 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [251946273] [2022-11-02 20:50:48,672 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:48,673 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:50:48,673 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:50:48,674 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-02 20:50:48,675 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-02 20:50:48,675 INFO L87 Difference]: Start difference. First operand 41842 states and 77174 transitions. cyclomatic complexity: 35347 Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:48,895 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:50:48,895 INFO L93 Difference]: Finished difference Result 41842 states and 77173 transitions. [2022-11-02 20:50:48,895 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41842 states and 77173 transitions. [2022-11-02 20:50:49,069 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:49,203 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41842 states to 41842 states and 77173 transitions. [2022-11-02 20:50:49,203 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28309 [2022-11-02 20:50:49,227 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28309 [2022-11-02 20:50:49,227 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41842 states and 77173 transitions. [2022-11-02 20:50:49,228 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:50:49,228 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77173 transitions. [2022-11-02 20:50:49,251 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41842 states and 77173 transitions. [2022-11-02 20:50:49,905 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41842 to 41842. [2022-11-02 20:50:49,931 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41842 states, 41842 states have (on average 1.8443908034988767) internal successors, (77173), 41841 states have internal predecessors, (77173), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:50,019 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41842 states to 41842 states and 77173 transitions. [2022-11-02 20:50:50,020 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77173 transitions. [2022-11-02 20:50:50,020 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-02 20:50:50,021 INFO L428 stractBuchiCegarLoop]: Abstraction has 41842 states and 77173 transitions. [2022-11-02 20:50:50,021 INFO L335 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-11-02 20:50:50,021 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41842 states and 77173 transitions. [2022-11-02 20:50:50,129 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:50,129 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:50:50,129 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:50:50,131 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:50,131 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:50,131 INFO L748 eck$LassoCheckResult]: Stem: 970188#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 970189#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 964931#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 964932#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 968895#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 968732#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 968733#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 970212#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 969851#L95 assume !(0 == getOrigin_~person#1); 966715#L99 assume !(1 == getOrigin_~person#1); 966716#L103 assume !(2 == getOrigin_~person#1); 971106#L107 assume !(3 == getOrigin_~person#1); 970370#L111 assume !(4 == getOrigin_~person#1); 969671#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 969449#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 969450#L653 assume !(0 == initPersonOnFloor_~floor#1); 969582#L680 assume 1 == initPersonOnFloor_~floor#1; 966289#L681 assume !(0 == initPersonOnFloor_~person#1); 966290#L684 assume !(1 == initPersonOnFloor_~person#1); 970578#L687 assume !(2 == initPersonOnFloor_~person#1); 969469#L690 assume !(3 == initPersonOnFloor_~person#1); 969470#L693 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 969008#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 965817#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 965253#L457-2 assume { :end_inline_callOnFloor } true; 965555#L797 assume { :end_inline_initPersonOnFloor } true; 965556#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 966278#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 967937#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 970347#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 966707#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 966708#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 967461#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 971165#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 965021#L2261 assume !(0 != timeShift_~tmp___9~2#1); 965022#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 970812#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 967163#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 967164#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 970662#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 970663#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 971578#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 971449#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 971450#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 971575#L2021 assume !(1 == ~currentHeading~0); 966604#L2031 assume !(0 == ~currentFloorID~0); 966605#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 973913#L2037-1 assume { :end_inline_continueInDirection } true; 974311#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 974310#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 974309#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 972652#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 972659#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 972625#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 972628#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 972619#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 972612#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 972609#L3285-2 assume !false; 972610#L3286 [2022-11-02 20:50:50,132 INFO L750 eck$LassoCheckResult]: Loop: 972610#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 997647#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 997646#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 997645#L3293 assume 1 != cleanup_~tmp___0~12#1; 997644#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 997639#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 997637#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 997621#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 997612#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 997607#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 997605#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 997604#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 987169#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 997603#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 997601#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 997602#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 998592#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 998580#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 998576#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 997578#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 997577#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 997575#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 997576#L2263-2 assume !(0 != ~persons_0~0); 999211#L2263-3 assume !(0 != ~persons_1~0); 999206#L2277-1 assume !(0 != ~persons_2~0); 999185#L2291-1 assume !(0 != ~persons_3~0); 999183#L2305-1 assume !(0 != ~persons_4~0); 999147#L2319-1 assume !(0 != ~persons_5~0); 999146#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 999145#L473-12 assume 0 == isPersonOnFloor_~floor#1; 998461#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 998447#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 998445#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 998443#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 998442#L473-14 assume 0 == isPersonOnFloor_~floor#1; 998383#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 998381#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 998379#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 998373#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 998370#L473-16 assume 0 == isPersonOnFloor_~floor#1; 998306#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 998284#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 998282#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 998274#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 998272#L473-18 assume 0 == isPersonOnFloor_~floor#1; 998241#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 998229#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 998227#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 998225#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 998223#L473-20 assume 0 == isPersonOnFloor_~floor#1; 998148#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 998116#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 998114#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 998112#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 998111#L473-22 assume 0 == isPersonOnFloor_~floor#1; 997716#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 997697#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 997695#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 997693#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 997692#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 997687#L429-41 assume { :end_inline_resetCallOnFloor } true; 997686#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 997684#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 997680#L1355-5 assume { :end_inline_resetFloorButton } true; 997678#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 997677#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 997676#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 997671#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 997679#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 997668#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 997659#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 997651#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 997649#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 997648#L3285-2 assume !false; 972610#L3286 [2022-11-02 20:50:50,133 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:50,133 INFO L85 PathProgramCache]: Analyzing trace with hash 537794530, now seen corresponding path program 1 times [2022-11-02 20:50:50,133 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:50,133 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1344997841] [2022-11-02 20:50:50,133 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:50,134 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:50,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:50,261 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:50,261 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:50,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1344997841] [2022-11-02 20:50:50,262 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1344997841] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:50,262 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:50,262 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:50:50,262 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1723135844] [2022-11-02 20:50:50,263 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:50,263 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:50:50,263 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:50,263 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 7 times [2022-11-02 20:50:50,264 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:50,264 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [839333352] [2022-11-02 20:50:50,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:50,264 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:50,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:50,390 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:50,390 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:50,391 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [839333352] [2022-11-02 20:50:50,391 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [839333352] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:50,391 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:50,391 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 20:50:50,391 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [508799382] [2022-11-02 20:50:50,392 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:50,392 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:50:50,392 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:50:50,393 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-02 20:50:50,393 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-02 20:50:50,393 INFO L87 Difference]: Start difference. First operand 41842 states and 77173 transitions. cyclomatic complexity: 35346 Second operand has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:50,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:50:50,670 INFO L93 Difference]: Finished difference Result 41842 states and 77172 transitions. [2022-11-02 20:50:50,670 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41842 states and 77172 transitions. [2022-11-02 20:50:50,830 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:50,948 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41842 states to 41842 states and 77172 transitions. [2022-11-02 20:50:50,948 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28309 [2022-11-02 20:50:50,969 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28309 [2022-11-02 20:50:50,970 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41842 states and 77172 transitions. [2022-11-02 20:50:50,972 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:50:50,973 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77172 transitions. [2022-11-02 20:50:51,001 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41842 states and 77172 transitions. [2022-11-02 20:50:51,813 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41842 to 41842. [2022-11-02 20:50:51,842 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41842 states, 41842 states have (on average 1.844366904067683) internal successors, (77172), 41841 states have internal predecessors, (77172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:51,908 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41842 states to 41842 states and 77172 transitions. [2022-11-02 20:50:51,908 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77172 transitions. [2022-11-02 20:50:51,909 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-02 20:50:51,909 INFO L428 stractBuchiCegarLoop]: Abstraction has 41842 states and 77172 transitions. [2022-11-02 20:50:51,909 INFO L335 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-11-02 20:50:51,909 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41842 states and 77172 transitions. [2022-11-02 20:50:51,993 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:51,993 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:50:51,993 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:50:51,995 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:51,995 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:51,995 INFO L748 eck$LassoCheckResult]: Stem: 1053979#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1053980#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1048630#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1048631#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1052647#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1052474#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1052475#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1054005#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1053650#L95 assume !(0 == getOrigin_~person#1); 1050425#L99 assume !(1 == getOrigin_~person#1); 1050426#L103 assume !(2 == getOrigin_~person#1); 1054965#L107 assume !(3 == getOrigin_~person#1); 1054177#L111 assume !(4 == getOrigin_~person#1); 1053454#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1053230#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1053231#L653 assume !(0 == initPersonOnFloor_~floor#1); 1053361#L680 assume 1 == initPersonOnFloor_~floor#1; 1049997#L681 assume !(0 == initPersonOnFloor_~person#1); 1049998#L684 assume !(1 == initPersonOnFloor_~person#1); 1054406#L687 assume !(2 == initPersonOnFloor_~person#1); 1053250#L690 assume !(3 == initPersonOnFloor_~person#1); 1053251#L693 assume !(4 == initPersonOnFloor_~person#1); 1052762#L696 assume !(5 == initPersonOnFloor_~person#1); 1052763#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1049521#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1048953#L457-2 assume { :end_inline_callOnFloor } true; 1049258#L797 assume { :end_inline_initPersonOnFloor } true; 1049259#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1049986#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1051659#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1054149#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1050417#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1050418#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1051180#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1055035#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1048720#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1048721#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1054674#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1050886#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1050887#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1054500#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1054501#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1055461#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1055333#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1055334#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1055458#L2021 assume !(1 == ~currentHeading~0); 1050317#L2031 assume !(0 == ~currentFloorID~0); 1050318#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1057941#L2037-1 assume { :end_inline_continueInDirection } true; 1057937#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1057935#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1057933#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1057918#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1057923#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1057896#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1057899#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1057888#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1057886#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1057884#L3285-2 assume !false; 1050915#L3286 [2022-11-02 20:50:51,996 INFO L750 eck$LassoCheckResult]: Loop: 1050915#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1050916#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1053292#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1052218#L3293 assume 1 != cleanup_~tmp___0~12#1; 1052219#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1051580#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1049067#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1049068#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1049640#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1050075#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1054687#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1052593#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1048793#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1048794#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1049559#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1049560#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1054605#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1052628#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1049428#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1052996#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1051390#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1051391#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1053885#L2263-2 assume !(0 != ~persons_0~0); 1049526#L2263-3 assume !(0 != ~persons_1~0); 1049303#L2277-1 assume !(0 != ~persons_2~0); 1049196#L2291-1 assume !(0 != ~persons_3~0); 1048872#L2305-1 assume !(0 != ~persons_4~0); 1049080#L2319-1 assume !(0 != ~persons_5~0); 1050308#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1050309#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1053717#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1048920#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1048690#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1048666#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1053726#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1053800#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1049213#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1053169#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1051500#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1050566#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1050567#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1048896#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1049362#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1050695#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1052490#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1053458#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1048580#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1053156#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1053424#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1053425#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1054292#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1048621#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1050114#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1052268#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1052269#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1053209#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1048586#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1051425#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1053951#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1050161#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1050162#L429-41 assume { :end_inline_resetCallOnFloor } true; 1053761#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1050204#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1049864#L1355-5 assume { :end_inline_resetFloorButton } true; 1054624#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1052823#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1051246#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1050777#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1051653#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1050858#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1050859#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1048784#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1053802#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1053096#L3285-2 assume !false; 1050915#L3286 [2022-11-02 20:50:51,996 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:51,997 INFO L85 PathProgramCache]: Analyzing trace with hash -1395488252, now seen corresponding path program 1 times [2022-11-02 20:50:51,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:51,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1148436509] [2022-11-02 20:50:51,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:51,997 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:52,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:52,045 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:52,045 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:52,045 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1148436509] [2022-11-02 20:50:52,045 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1148436509] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:52,045 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:52,046 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:50:52,046 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [736733298] [2022-11-02 20:50:52,046 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:52,046 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:50:52,047 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:52,047 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 8 times [2022-11-02 20:50:52,047 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:52,047 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [54219738] [2022-11-02 20:50:52,047 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:52,047 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:52,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:52,138 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:52,138 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:52,138 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [54219738] [2022-11-02 20:50:52,139 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [54219738] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:52,139 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:52,139 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 20:50:52,139 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1628976045] [2022-11-02 20:50:52,139 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:52,140 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:50:52,140 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:50:52,140 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:50:52,140 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:50:52,140 INFO L87 Difference]: Start difference. First operand 41842 states and 77172 transitions. cyclomatic complexity: 35345 Second operand has 3 states, 3 states have (on average 19.666666666666668) internal successors, (59), 3 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:52,321 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:50:52,321 INFO L93 Difference]: Finished difference Result 41842 states and 77171 transitions. [2022-11-02 20:50:52,321 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41842 states and 77171 transitions. [2022-11-02 20:50:52,459 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:52,551 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41842 states to 41842 states and 77171 transitions. [2022-11-02 20:50:52,551 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28309 [2022-11-02 20:50:52,568 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28309 [2022-11-02 20:50:52,569 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41842 states and 77171 transitions. [2022-11-02 20:50:52,579 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:50:52,579 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77171 transitions. [2022-11-02 20:50:52,599 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41842 states and 77171 transitions. [2022-11-02 20:50:53,420 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41842 to 41842. [2022-11-02 20:50:53,450 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41842 states, 41842 states have (on average 1.8443430046364897) internal successors, (77171), 41841 states have internal predecessors, (77171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:53,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41842 states to 41842 states and 77171 transitions. [2022-11-02 20:50:53,512 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77171 transitions. [2022-11-02 20:50:53,513 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 20:50:53,513 INFO L428 stractBuchiCegarLoop]: Abstraction has 41842 states and 77171 transitions. [2022-11-02 20:50:53,513 INFO L335 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-11-02 20:50:53,514 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41842 states and 77171 transitions. [2022-11-02 20:50:53,601 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:53,602 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:50:53,602 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:50:53,603 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:53,604 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:53,604 INFO L748 eck$LassoCheckResult]: Stem: 1137597#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1137598#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1132327#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1132328#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1136332#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1136162#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1136163#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1137618#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1137284#L95 assume !(0 == getOrigin_~person#1); 1134113#L99 assume !(1 == getOrigin_~person#1); 1134114#L103 assume !(2 == getOrigin_~person#1); 1138553#L107 assume !(3 == getOrigin_~person#1); 1137786#L111 assume !(4 == getOrigin_~person#1); 1137097#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1136885#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1136886#L653 assume !(0 == initPersonOnFloor_~floor#1); 1137009#L680 assume 1 == initPersonOnFloor_~floor#1; 1133696#L681 assume !(0 == initPersonOnFloor_~person#1); 1133697#L684 assume !(1 == initPersonOnFloor_~person#1); 1138013#L687 assume !(2 == initPersonOnFloor_~person#1); 1136906#L690 assume !(3 == initPersonOnFloor_~person#1); 1136907#L693 assume !(4 == initPersonOnFloor_~person#1); 1136439#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1136440#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1133224#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1132647#L457-2 assume { :end_inline_callOnFloor } true; 1132955#L797 assume { :end_inline_initPersonOnFloor } true; 1132956#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1133679#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1135348#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1137763#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1134105#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1134106#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1134868#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1136098#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1132415#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1132416#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1138258#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1134584#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1134585#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1138103#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1136934#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1136693#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1136694#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1136770#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1136771#L2021 assume !(1 == ~currentHeading~0); 1137394#L2031 assume !(0 == ~currentFloorID~0); 1135909#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1135910#L2037-1 assume { :end_inline_continueInDirection } true; 1142032#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1142031#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1142030#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1140175#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1140176#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1140163#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1140164#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1142012#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1142011#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1140124#L3285-2 assume !false; 1140125#L3286 [2022-11-02 20:50:53,605 INFO L750 eck$LassoCheckResult]: Loop: 1140125#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1153529#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1153528#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1153523#L3293 assume 1 != cleanup_~tmp___0~12#1; 1153521#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1153520#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1153519#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1151830#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1151819#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1151816#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1151815#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1151814#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1151639#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1151812#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1151809#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1151810#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1153955#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1153944#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1153940#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1153909#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1152312#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1152310#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1152311#L2263-2 assume !(0 != ~persons_0~0); 1167442#L2263-3 assume !(0 != ~persons_1~0); 1167437#L2277-1 assume !(0 != ~persons_2~0); 1167416#L2291-1 assume !(0 != ~persons_3~0); 1167414#L2305-1 assume !(0 != ~persons_4~0); 1167378#L2319-1 assume !(0 != ~persons_5~0); 1167377#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1167376#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1167281#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1167267#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1167265#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1167263#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1167262#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1167153#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1167151#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1167149#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1167147#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1167146#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1167057#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1167035#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1167033#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1167031#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1167030#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1167004#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1166993#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1166906#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1166885#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1166876#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1166858#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1166825#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1166823#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1166820#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1166819#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1166684#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1166665#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1166663#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1166661#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1166660#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1166655#L429-41 assume { :end_inline_resetCallOnFloor } true; 1166654#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1166652#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1166648#L1355-5 assume { :end_inline_resetFloorButton } true; 1166647#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1166641#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1156900#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1156893#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1156892#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1153576#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1153567#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1153532#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1153531#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1153530#L3285-2 assume !false; 1140125#L3286 [2022-11-02 20:50:53,605 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:53,606 INFO L85 PathProgramCache]: Analyzing trace with hash -2055019774, now seen corresponding path program 1 times [2022-11-02 20:50:53,606 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:53,606 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [417114474] [2022-11-02 20:50:53,606 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:53,606 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:53,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:53,722 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:53,722 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:53,722 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [417114474] [2022-11-02 20:50:53,722 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [417114474] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:53,723 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:53,723 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-02 20:50:53,723 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [871978411] [2022-11-02 20:50:53,723 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:53,724 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:50:53,725 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:53,725 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 9 times [2022-11-02 20:50:53,725 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:53,725 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [650223909] [2022-11-02 20:50:53,725 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:53,725 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:53,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:53,817 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:53,817 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:53,817 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [650223909] [2022-11-02 20:50:53,817 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [650223909] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:53,817 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:53,818 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 20:50:53,818 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [75332087] [2022-11-02 20:50:53,818 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:53,818 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:50:53,818 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:50:53,819 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 20:50:53,819 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-02 20:50:53,819 INFO L87 Difference]: Start difference. First operand 41842 states and 77171 transitions. cyclomatic complexity: 35344 Second operand has 7 states, 7 states have (on average 8.428571428571429) internal successors, (59), 7 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:54,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:50:54,121 INFO L93 Difference]: Finished difference Result 41842 states and 77170 transitions. [2022-11-02 20:50:54,121 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41842 states and 77170 transitions. [2022-11-02 20:50:54,295 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:54,416 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41842 states to 41842 states and 77170 transitions. [2022-11-02 20:50:54,416 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28309 [2022-11-02 20:50:54,434 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28309 [2022-11-02 20:50:54,434 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41842 states and 77170 transitions. [2022-11-02 20:50:54,435 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:50:54,435 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77170 transitions. [2022-11-02 20:50:54,455 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41842 states and 77170 transitions. [2022-11-02 20:50:55,253 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41842 to 41842. [2022-11-02 20:50:55,282 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41842 states, 41842 states have (on average 1.844319105205296) internal successors, (77170), 41841 states have internal predecessors, (77170), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:55,339 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41842 states to 41842 states and 77170 transitions. [2022-11-02 20:50:55,339 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77170 transitions. [2022-11-02 20:50:55,340 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 20:50:55,340 INFO L428 stractBuchiCegarLoop]: Abstraction has 41842 states and 77170 transitions. [2022-11-02 20:50:55,340 INFO L335 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2022-11-02 20:50:55,340 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41842 states and 77170 transitions. [2022-11-02 20:50:55,431 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-11-02 20:50:55,431 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:50:55,432 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:50:55,433 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:55,433 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:55,433 INFO L748 eck$LassoCheckResult]: Stem: 1221328#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1221329#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1216035#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1216036#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1220021#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1219848#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1219849#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1221351#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1221011#L95 assume !(0 == getOrigin_~person#1); 1217822#L99 assume !(1 == getOrigin_~person#1); 1217823#L103 assume !(2 == getOrigin_~person#1); 1222265#L107 assume !(3 == getOrigin_~person#1); 1221518#L111 assume !(4 == getOrigin_~person#1); 1220812#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1220591#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1220592#L653 assume !(0 == initPersonOnFloor_~floor#1); 1220723#L680 assume 1 == initPersonOnFloor_~floor#1; 1217404#L681 assume !(0 == initPersonOnFloor_~person#1); 1217405#L684 assume !(1 == initPersonOnFloor_~person#1); 1221749#L687 assume !(2 == initPersonOnFloor_~person#1); 1220614#L690 assume !(3 == initPersonOnFloor_~person#1); 1220615#L693 assume !(4 == initPersonOnFloor_~person#1); 1220132#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1220133#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1216933#L445 assume !(0 == callOnFloor_~floorID#1); 1216934#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1216356#L457-2 assume { :end_inline_callOnFloor } true; 1216663#L797 assume { :end_inline_initPersonOnFloor } true; 1216664#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1217387#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1219054#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1221496#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1217814#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1217815#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1218568#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1222342#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1223204#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1223201#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1223200#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1223190#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1223045#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1223044#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1223023#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1223021#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1223020#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1223018#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1223019#L2021 assume !(1 == ~currentHeading~0); 1217714#L2031 assume !(0 == ~currentFloorID~0); 1217715#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1225405#L2037-1 assume { :end_inline_continueInDirection } true; 1225401#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1225399#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1225397#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1225382#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1225387#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1225360#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1225363#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1225352#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1225350#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1225347#L3285-2 assume !false; 1225348#L3286 [2022-11-02 20:50:55,433 INFO L750 eck$LassoCheckResult]: Loop: 1225348#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1250965#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1250964#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1250963#L3293 assume 1 != cleanup_~tmp___0~12#1; 1250962#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1250961#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1250960#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1250812#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1250802#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1250798#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1250796#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1250794#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1234240#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1250791#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1250788#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1250789#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1251778#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1251749#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1251746#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1251744#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1219038#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1251707#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1251704#L2263-2 assume !(0 != ~persons_0~0); 1251676#L2263-3 assume !(0 != ~persons_1~0); 1251671#L2277-1 assume !(0 != ~persons_2~0); 1251650#L2291-1 assume !(0 != ~persons_3~0); 1251648#L2305-1 assume !(0 != ~persons_4~0); 1251626#L2319-1 assume !(0 != ~persons_5~0); 1251625#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1251624#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1251498#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1251484#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1251482#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1251480#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1251479#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1251356#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1251354#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1251352#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1251350#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1251349#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1251321#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1251299#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1251297#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1251289#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1251287#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1251256#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1251244#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1251242#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1251240#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1251238#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1251163#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1251131#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1251129#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1251127#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1251126#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1251034#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1251015#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1251013#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1251011#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1251010#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1251005#L429-41 assume { :end_inline_resetCallOnFloor } true; 1251004#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1251002#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1250998#L1355-5 assume { :end_inline_resetFloorButton } true; 1250996#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1250995#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1250994#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1250989#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1250997#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1250986#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1250977#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1250973#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1250972#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1250971#L3285-2 assume !false; 1225348#L3286 [2022-11-02 20:50:55,434 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:55,434 INFO L85 PathProgramCache]: Analyzing trace with hash 668868151, now seen corresponding path program 1 times [2022-11-02 20:50:55,434 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:55,434 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1857572195] [2022-11-02 20:50:55,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:55,434 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:55,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:55,501 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:55,502 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:55,502 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1857572195] [2022-11-02 20:50:55,502 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1857572195] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:55,502 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:55,503 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:50:55,503 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [433994590] [2022-11-02 20:50:55,503 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:55,505 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:50:55,506 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:55,506 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 10 times [2022-11-02 20:50:55,506 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:55,506 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2134722641] [2022-11-02 20:50:55,507 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:55,507 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:55,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:55,594 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:55,594 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:55,594 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2134722641] [2022-11-02 20:50:55,595 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2134722641] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:55,595 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:55,595 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 20:50:55,595 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [294771464] [2022-11-02 20:50:55,595 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:55,596 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:50:55,596 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:50:55,596 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-02 20:50:55,596 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-02 20:50:55,597 INFO L87 Difference]: Start difference. First operand 41842 states and 77170 transitions. cyclomatic complexity: 35343 Second operand has 4 states, 4 states have (on average 15.0) internal successors, (60), 3 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:57,296 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:50:57,296 INFO L93 Difference]: Finished difference Result 25352 states and 46016 transitions. [2022-11-02 20:50:57,296 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25352 states and 46016 transitions. [2022-11-02 20:50:57,378 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 11298 [2022-11-02 20:50:57,869 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25352 states to 25352 states and 46016 transitions. [2022-11-02 20:50:57,870 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17799 [2022-11-02 20:50:57,882 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17799 [2022-11-02 20:50:57,882 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25352 states and 46016 transitions. [2022-11-02 20:50:57,883 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:50:57,883 INFO L218 hiAutomatonCegarLoop]: Abstraction has 25352 states and 46016 transitions. [2022-11-02 20:50:57,896 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25352 states and 46016 transitions. [2022-11-02 20:50:58,076 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25352 to 14709. [2022-11-02 20:50:58,088 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14709 states, 14709 states have (on average 1.8056971921952547) internal successors, (26560), 14708 states have internal predecessors, (26560), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:50:58,121 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14709 states to 14709 states and 26560 transitions. [2022-11-02 20:50:58,121 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14709 states and 26560 transitions. [2022-11-02 20:50:58,121 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-02 20:50:58,122 INFO L428 stractBuchiCegarLoop]: Abstraction has 14709 states and 26560 transitions. [2022-11-02 20:50:58,122 INFO L335 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2022-11-02 20:50:58,122 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14709 states and 26560 transitions. [2022-11-02 20:50:58,167 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 6397 [2022-11-02 20:50:58,167 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:50:58,167 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:50:58,169 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:58,170 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:50:58,170 INFO L748 eck$LassoCheckResult]: Stem: 1288474#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1288475#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1283243#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1283244#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1287177#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1287014#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1287015#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1288495#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1288143#L95 assume !(0 == getOrigin_~person#1); 1285016#L99 assume !(1 == getOrigin_~person#1); 1285017#L103 assume !(2 == getOrigin_~person#1); 1289354#L107 assume !(3 == getOrigin_~person#1); 1288659#L111 assume !(4 == getOrigin_~person#1); 1287948#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1287737#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1287738#L653 assume !(0 == initPersonOnFloor_~floor#1); 1287866#L680 assume 1 == initPersonOnFloor_~floor#1; 1284585#L681 assume !(0 == initPersonOnFloor_~person#1); 1284586#L684 assume !(1 == initPersonOnFloor_~person#1); 1288867#L687 assume !(2 == initPersonOnFloor_~person#1); 1287759#L690 assume !(3 == initPersonOnFloor_~person#1); 1287760#L693 assume !(4 == initPersonOnFloor_~person#1); 1287283#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1287284#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1284115#L445 assume !(0 == callOnFloor_~floorID#1); 1284116#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1283556#L457-2 assume { :end_inline_callOnFloor } true; 1283855#L797 assume { :end_inline_initPersonOnFloor } true; 1283856#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1284574#L382 assume !(0 == isFloorCalling_~floorID#1); 1285254#L386 assume !(1 == isFloorCalling_~floorID#1); 1285255#L390 assume !(2 == isFloorCalling_~floorID#1); 1287355#L394 assume !(3 == isFloorCalling_~floorID#1); 1288466#L398 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1288467#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1288638#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1285008#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1285009#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1285753#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1285719#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1283329#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1283330#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1289096#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1285467#L382-3 assume !(0 == isFloorCalling_~floorID#1); 1285468#L386-3 assume !(1 == isFloorCalling_~floorID#1); 1287661#L390-3 assume !(2 == isFloorCalling_~floorID#1); 1283996#L394-3 assume !(3 == isFloorCalling_~floorID#1); 1283997#L398-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1286260#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1288943#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1287790#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1287542#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1287543#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1289653#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1289654#L2021 assume !(1 == ~currentHeading~0); 1289875#L2031 assume !(0 == ~currentFloorID~0); 1284902#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1285816#L2037-1 assume { :end_inline_continueInDirection } true; 1285817#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1285205#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1285206#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1284410#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1288629#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1287766#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1287767#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1287803#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1287804#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1291270#L3285-2 assume !false; 1285493#L3286 [2022-11-02 20:50:58,171 INFO L750 eck$LassoCheckResult]: Loop: 1285493#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1285494#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1287799#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1286755#L3293 assume 1 != cleanup_~tmp___0~12#1; 1286756#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1287822#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1295845#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1295838#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1295829#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1295272#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1294303#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1294302#L382-70 assume !(0 == isFloorCalling_~floorID#1); 1294301#L386-70 assume !(1 == isFloorCalling_~floorID#1); 1290513#L390-70 assume !(2 == isFloorCalling_~floorID#1); 1290014#L394-70 assume !(3 == isFloorCalling_~floorID#1); 1290012#L398-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1290013#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1290008#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1290009#L2109-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1290003#L1372-6 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1290004#L2113-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1289997#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1289998#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1294233#L2263-2 assume !(0 != ~persons_0~0); 1296462#L2263-3 assume !(0 != ~persons_1~0); 1296457#L2277-1 assume !(0 != ~persons_2~0); 1296436#L2291-1 assume !(0 != ~persons_3~0); 1296434#L2305-1 assume !(0 != ~persons_4~0); 1296398#L2319-1 assume !(0 != ~persons_5~0); 1296397#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1296396#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1296368#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1296354#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1296352#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1296350#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1296349#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1296314#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1296313#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1296309#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1296307#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1296306#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1296238#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1296210#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1296202#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1296199#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1296185#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1296024#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1296013#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1296011#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1296009#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1296008#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1295989#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1295958#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1295956#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1295952#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1295951#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1295929#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1295910#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1295908#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1295906#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1295905#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1295900#L429-41 assume { :end_inline_resetCallOnFloor } true; 1295899#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1295897#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1295893#L1355-5 assume { :end_inline_resetFloorButton } true; 1295892#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1295891#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1295889#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1295884#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1295890#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1295881#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1295872#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1295868#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1295867#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1287601#L3285-2 assume !false; 1285493#L3286 [2022-11-02 20:50:58,172 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:58,172 INFO L85 PathProgramCache]: Analyzing trace with hash 1144164555, now seen corresponding path program 1 times [2022-11-02 20:50:58,172 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:58,172 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [218767370] [2022-11-02 20:50:58,173 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:58,173 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:58,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:58,288 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:58,289 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:58,289 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [218767370] [2022-11-02 20:50:58,289 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [218767370] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:58,289 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:58,289 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:50:58,289 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1327875953] [2022-11-02 20:50:58,290 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:58,290 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:50:58,290 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:50:58,291 INFO L85 PathProgramCache]: Analyzing trace with hash 371899072, now seen corresponding path program 1 times [2022-11-02 20:50:58,291 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:50:58,291 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1734476139] [2022-11-02 20:50:58,291 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:50:58,291 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:50:58,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:50:58,337 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:50:58,337 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:50:58,337 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1734476139] [2022-11-02 20:50:58,337 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1734476139] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:50:58,338 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:50:58,338 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:50:58,338 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1617371576] [2022-11-02 20:50:58,338 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:50:58,339 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:50:58,339 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:50:58,339 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:50:58,339 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:50:58,340 INFO L87 Difference]: Start difference. First operand 14709 states and 26560 transitions. cyclomatic complexity: 11856 Second operand has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 5 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:51:01,907 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:51:01,907 INFO L93 Difference]: Finished difference Result 93188 states and 170535 transitions. [2022-11-02 20:51:01,907 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 93188 states and 170535 transitions. [2022-11-02 20:51:02,188 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 33426 [2022-11-02 20:51:02,406 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 93188 states to 93188 states and 170535 transitions. [2022-11-02 20:51:02,406 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 65835 [2022-11-02 20:51:02,446 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 65835 [2022-11-02 20:51:02,446 INFO L73 IsDeterministic]: Start isDeterministic. Operand 93188 states and 170535 transitions. [2022-11-02 20:51:02,447 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:51:02,447 INFO L218 hiAutomatonCegarLoop]: Abstraction has 93188 states and 170535 transitions. [2022-11-02 20:51:02,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93188 states and 170535 transitions. [2022-11-02 20:51:03,377 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93188 to 29207. [2022-11-02 20:51:03,399 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29207 states, 29207 states have (on average 1.8065874619098161) internal successors, (52765), 29206 states have internal predecessors, (52765), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:51:03,443 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29207 states to 29207 states and 52765 transitions. [2022-11-02 20:51:03,443 INFO L240 hiAutomatonCegarLoop]: Abstraction has 29207 states and 52765 transitions. [2022-11-02 20:51:03,443 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-02 20:51:03,444 INFO L428 stractBuchiCegarLoop]: Abstraction has 29207 states and 52765 transitions. [2022-11-02 20:51:03,444 INFO L335 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2022-11-02 20:51:03,444 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29207 states and 52765 transitions. [2022-11-02 20:51:03,508 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 12690 [2022-11-02 20:51:03,509 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:51:03,509 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:51:03,510 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:51:03,511 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:51:03,511 INFO L748 eck$LassoCheckResult]: Stem: 1396350#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1396351#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1391164#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1391165#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1395087#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1394921#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1394922#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1396374#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1396032#L95 assume !(0 == getOrigin_~person#1); 1392925#L99 assume !(1 == getOrigin_~person#1); 1392926#L103 assume !(2 == getOrigin_~person#1); 1397197#L107 assume !(3 == getOrigin_~person#1); 1396524#L111 assume !(4 == getOrigin_~person#1); 1395852#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1395644#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1395645#L653 assume !(0 == initPersonOnFloor_~floor#1); 1395765#L680 assume 1 == initPersonOnFloor_~floor#1; 1392505#L681 assume !(0 == initPersonOnFloor_~person#1); 1392506#L684 assume !(1 == initPersonOnFloor_~person#1); 1396713#L687 assume !(2 == initPersonOnFloor_~person#1); 1395667#L690 assume !(3 == initPersonOnFloor_~person#1); 1395668#L693 assume !(4 == initPersonOnFloor_~person#1); 1395191#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1395192#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1392043#L445 assume !(0 == callOnFloor_~floorID#1); 1392044#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1391478#L457-2 assume { :end_inline_callOnFloor } true; 1391777#L797 assume { :end_inline_initPersonOnFloor } true; 1391778#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1392488#L382 assume !(0 == isFloorCalling_~floorID#1); 1393165#L386 assume !(1 == isFloorCalling_~floorID#1); 1393166#L390 assume !(2 == isFloorCalling_~floorID#1); 1395273#L394 assume !(3 == isFloorCalling_~floorID#1); 1396344#L398 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1396345#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1396504#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1392918#L2109 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1392430#L2083-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1392432#L1372-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1394697#L1389-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1393755#L1410-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1398326#L2094-1 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1398325#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1398323#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1398324#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1398906#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1398905#L382-3 assume !(0 == isFloorCalling_~floorID#1); 1398904#L386-3 assume !(1 == isFloorCalling_~floorID#1); 1398903#L390-3 assume !(2 == isFloorCalling_~floorID#1); 1398902#L394-3 assume !(3 == isFloorCalling_~floorID#1); 1398901#L398-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1398900#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1398899#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1398897#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1398895#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1398894#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1398892#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1398893#L2021 assume !(1 == ~currentHeading~0); 1399934#L2031 assume !(0 == ~currentFloorID~0); 1394665#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1394666#L2037-1 assume { :end_inline_continueInDirection } true; 1405189#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1405188#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1405186#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1405181#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1405182#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1405172#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1405175#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1395708#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1393493#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1393494#L3285-2 assume !false; 1399953#L3286 [2022-11-02 20:51:03,512 INFO L750 eck$LassoCheckResult]: Loop: 1399953#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1409618#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1409615#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1409609#L3293 assume 1 != cleanup_~tmp___0~12#1; 1409602#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1409601#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1409589#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1409571#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1409560#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1409559#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1407450#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1406274#L382-70 assume !(0 == isFloorCalling_~floorID#1); 1406275#L386-70 assume !(1 == isFloorCalling_~floorID#1); 1406267#L390-70 assume !(2 == isFloorCalling_~floorID#1); 1406268#L394-70 assume !(3 == isFloorCalling_~floorID#1); 1406259#L398-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1406260#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1406251#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1406252#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1407448#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1407447#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1407444#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1407441#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1407433#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1407432#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1407430#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1407431#L2263-2 assume !(0 != ~persons_0~0); 1414416#L2263-3 assume !(0 != ~persons_1~0); 1414411#L2277-1 assume !(0 != ~persons_2~0); 1414392#L2291-1 assume !(0 != ~persons_3~0); 1414359#L2305-1 assume !(0 != ~persons_4~0); 1414350#L2319-1 assume !(0 != ~persons_5~0); 1414349#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1414348#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1414325#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1414312#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1414310#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1414308#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1414307#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1414266#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1414264#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1414262#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1414260#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1414259#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1414245#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1414224#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1414217#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1414214#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1414213#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1414175#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1414163#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1414161#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1414159#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1414158#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1413133#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1413094#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1413070#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1413067#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1413066#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1413046#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1413017#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1413007#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1413004#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1411981#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1411975#L429-41 assume { :end_inline_resetCallOnFloor } true; 1411969#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1411967#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1411959#L1355-5 assume { :end_inline_resetFloorButton } true; 1410908#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1409990#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1409988#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1409981#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1409974#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1409969#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1409960#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1409631#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1409627#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1409625#L3285-2 assume !false; 1399953#L3286 [2022-11-02 20:51:03,512 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:51:03,512 INFO L85 PathProgramCache]: Analyzing trace with hash 1222667021, now seen corresponding path program 1 times [2022-11-02 20:51:03,512 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:51:03,513 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1746394041] [2022-11-02 20:51:03,513 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:51:03,513 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:51:03,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:51:03,614 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:51:03,615 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:51:03,615 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1746394041] [2022-11-02 20:51:03,615 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1746394041] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:51:03,615 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:51:03,615 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:51:03,616 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [247295509] [2022-11-02 20:51:03,616 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:51:03,616 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:51:03,616 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:51:03,617 INFO L85 PathProgramCache]: Analyzing trace with hash 1794998960, now seen corresponding path program 1 times [2022-11-02 20:51:03,617 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:51:03,617 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2024816542] [2022-11-02 20:51:03,617 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:51:03,617 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:51:03,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:51:03,720 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:51:03,721 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:51:03,721 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2024816542] [2022-11-02 20:51:03,721 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2024816542] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:51:03,721 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:51:03,721 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:51:03,721 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1114773743] [2022-11-02 20:51:03,722 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:51:03,722 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:51:03,722 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:51:03,723 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:51:03,723 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:51:03,723 INFO L87 Difference]: Start difference. First operand 29207 states and 52765 transitions. cyclomatic complexity: 23568 Second operand has 6 states, 6 states have (on average 11.833333333333334) internal successors, (71), 5 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:51:06,960 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:51:06,960 INFO L93 Difference]: Finished difference Result 91930 states and 168732 transitions. [2022-11-02 20:51:06,960 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 91930 states and 168732 transitions. [2022-11-02 20:51:07,227 INFO L131 ngComponentsAnalysis]: Automaton has 11 accepting balls. 38553 [2022-11-02 20:51:07,446 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 91930 states to 91930 states and 168732 transitions. [2022-11-02 20:51:07,446 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 63683 [2022-11-02 20:51:07,483 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 63683 [2022-11-02 20:51:07,483 INFO L73 IsDeterministic]: Start isDeterministic. Operand 91930 states and 168732 transitions. [2022-11-02 20:51:07,484 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:51:07,484 INFO L218 hiAutomatonCegarLoop]: Abstraction has 91930 states and 168732 transitions. [2022-11-02 20:51:07,531 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91930 states and 168732 transitions. [2022-11-02 20:51:08,457 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91930 to 29172. [2022-11-02 20:51:08,480 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29172 states, 29172 states have (on average 1.806423968188674) internal successors, (52697), 29171 states have internal predecessors, (52697), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:51:08,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29172 states to 29172 states and 52697 transitions. [2022-11-02 20:51:08,543 INFO L240 hiAutomatonCegarLoop]: Abstraction has 29172 states and 52697 transitions. [2022-11-02 20:51:08,543 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-02 20:51:08,543 INFO L428 stractBuchiCegarLoop]: Abstraction has 29172 states and 52697 transitions. [2022-11-02 20:51:08,543 INFO L335 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2022-11-02 20:51:08,544 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29172 states and 52697 transitions. [2022-11-02 20:51:08,626 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 12679 [2022-11-02 20:51:08,626 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:51:08,626 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:51:08,628 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:51:08,628 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:51:08,629 INFO L748 eck$LassoCheckResult]: Stem: 1517725#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1517726#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1512328#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1512329#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1516333#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1516160#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1516161#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1517753#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1517356#L95 assume !(0 == getOrigin_~person#1); 1514105#L99 assume !(1 == getOrigin_~person#1); 1514106#L103 assume !(2 == getOrigin_~person#1); 1518771#L107 assume !(3 == getOrigin_~person#1); 1517946#L111 assume !(4 == getOrigin_~person#1); 1517145#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1516915#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1516916#L653 assume !(0 == initPersonOnFloor_~floor#1); 1517054#L680 assume 1 == initPersonOnFloor_~floor#1; 1513676#L681 assume !(0 == initPersonOnFloor_~person#1); 1513677#L684 assume !(1 == initPersonOnFloor_~person#1); 1518177#L687 assume !(2 == initPersonOnFloor_~person#1); 1516938#L690 assume !(3 == initPersonOnFloor_~person#1); 1516939#L693 assume !(4 == initPersonOnFloor_~person#1); 1516442#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1516443#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1513205#L445 assume !(0 == callOnFloor_~floorID#1); 1513206#L448 assume !(1 == callOnFloor_~floorID#1); 1512641#L451 assume !(2 == callOnFloor_~floorID#1); 1512643#L454 assume !(3 == callOnFloor_~floorID#1); 1512721#L457 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 1512722#L457-2 assume { :end_inline_callOnFloor } true; 1519063#L797 assume { :end_inline_initPersonOnFloor } true; 1519062#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1519060#L382 assume !(0 == isFloorCalling_~floorID#1); 1519058#L386 assume !(1 == isFloorCalling_~floorID#1); 1519056#L390 assume !(2 == isFloorCalling_~floorID#1); 1519054#L394 assume !(3 == isFloorCalling_~floorID#1); 1519052#L398 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1519050#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1519048#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1519045#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1514857#L1372 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1514858#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1514824#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1516098#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1518440#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1518441#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1514578#L382-3 assume !(0 == isFloorCalling_~floorID#1); 1514579#L386-3 assume !(1 == isFloorCalling_~floorID#1); 1516842#L390-3 assume !(2 == isFloorCalling_~floorID#1); 1513090#L394-3 assume !(3 == isFloorCalling_~floorID#1); 1513091#L398-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1515378#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1518262#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1518263#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1516713#L1372-3 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1516714#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1519964#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1519965#L2021 assume !(1 == ~currentHeading~0); 1519962#L2031 assume !(0 == ~currentFloorID~0); 1513992#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1520666#L2037-1 assume { :end_inline_continueInDirection } true; 1520661#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1520662#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1524614#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1524609#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1524610#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1524600#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1524603#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1524593#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1524592#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1524591#L3285-2 assume !false; 1522240#L3286 [2022-11-02 20:51:08,629 INFO L750 eck$LassoCheckResult]: Loop: 1522240#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1522239#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1522234#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1522232#L3293 assume 1 != cleanup_~tmp___0~12#1; 1522226#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1522225#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1522218#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1522198#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1522157#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1522146#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1522092#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1520626#L382-70 assume !(0 == isFloorCalling_~floorID#1); 1520627#L386-70 assume !(1 == isFloorCalling_~floorID#1); 1520597#L390-70 assume !(2 == isFloorCalling_~floorID#1); 1520598#L394-70 assume !(3 == isFloorCalling_~floorID#1); 1520566#L398-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1520567#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1520560#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1520561#L2109-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1517329#L1372-6 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1517330#L2113-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1522071#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1522072#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1526333#L2263-2 assume !(0 != ~persons_0~0); 1528900#L2263-3 assume !(0 != ~persons_1~0); 1528895#L2277-1 assume !(0 != ~persons_2~0); 1528874#L2291-1 assume !(0 != ~persons_3~0); 1528872#L2305-1 assume !(0 != ~persons_4~0); 1528836#L2319-1 assume !(0 != ~persons_5~0); 1528835#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1528834#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1528786#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1528772#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1528770#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1528768#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1528767#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1528658#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1528656#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1528654#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1528652#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1528651#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1528560#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1528538#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1528536#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1528534#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1528533#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1528429#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1528417#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1528415#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1528413#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1528411#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1528409#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1528378#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1528376#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1528372#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1528371#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1528276#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1528245#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1528234#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1528231#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1528225#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1528218#L429-41 assume { :end_inline_resetCallOnFloor } true; 1528211#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1528199#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1522276#L1355-5 assume { :end_inline_resetFloorButton } true; 1522274#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1522271#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1522270#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1522264#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1522262#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1522256#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1522247#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1522243#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1522242#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1522241#L3285-2 assume !false; 1522240#L3286 [2022-11-02 20:51:08,630 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:51:08,630 INFO L85 PathProgramCache]: Analyzing trace with hash 1317218144, now seen corresponding path program 1 times [2022-11-02 20:51:08,630 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:51:08,631 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1005700958] [2022-11-02 20:51:08,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:51:08,631 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:51:08,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:51:08,742 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:51:08,743 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:51:08,743 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1005700958] [2022-11-02 20:51:08,743 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1005700958] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:51:08,743 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:51:08,744 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:51:08,744 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [476440027] [2022-11-02 20:51:08,744 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:51:08,744 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:51:08,745 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:51:08,745 INFO L85 PathProgramCache]: Analyzing trace with hash 371899072, now seen corresponding path program 2 times [2022-11-02 20:51:08,745 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:51:08,745 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [254790504] [2022-11-02 20:51:08,745 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:51:08,746 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:51:08,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:51:08,790 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:51:08,790 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:51:08,790 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [254790504] [2022-11-02 20:51:08,791 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [254790504] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:51:08,791 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:51:08,791 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:51:08,791 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1068257331] [2022-11-02 20:51:08,791 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:51:08,792 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:51:08,792 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:51:08,792 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 20:51:08,792 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 20:51:08,793 INFO L87 Difference]: Start difference. First operand 29172 states and 52697 transitions. cyclomatic complexity: 23535 Second operand has 5 states, 5 states have (on average 14.2) internal successors, (71), 5 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:51:08,936 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:51:08,936 INFO L93 Difference]: Finished difference Result 14489 states and 26163 transitions. [2022-11-02 20:51:08,937 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14489 states and 26163 transitions. [2022-11-02 20:51:08,994 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 6282 [2022-11-02 20:51:09,031 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14489 states to 14489 states and 26163 transitions. [2022-11-02 20:51:09,031 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10180 [2022-11-02 20:51:09,038 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10180 [2022-11-02 20:51:09,038 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14489 states and 26163 transitions. [2022-11-02 20:51:09,039 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:51:09,040 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14489 states and 26163 transitions. [2022-11-02 20:51:09,049 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14489 states and 26163 transitions. [2022-11-02 20:51:09,182 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14489 to 14489. [2022-11-02 20:51:09,194 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14489 states, 14489 states have (on average 1.8057146801021464) internal successors, (26163), 14488 states have internal predecessors, (26163), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:51:09,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14489 states to 14489 states and 26163 transitions. [2022-11-02 20:51:09,223 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14489 states and 26163 transitions. [2022-11-02 20:51:09,223 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 20:51:09,224 INFO L428 stractBuchiCegarLoop]: Abstraction has 14489 states and 26163 transitions. [2022-11-02 20:51:09,224 INFO L335 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2022-11-02 20:51:09,224 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14489 states and 26163 transitions. [2022-11-02 20:51:09,265 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 6282 [2022-11-02 20:51:09,266 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:51:09,266 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:51:09,267 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:51:09,268 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:51:09,268 INFO L748 eck$LassoCheckResult]: Stem: 1561034#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1561035#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1556003#L2763 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1556004#L2756 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1559839#L2771 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1559680#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1559681#L3453 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1561054#L978 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1560738#L95 assume !(0 == getOrigin_~person#1); 1557737#L99 assume !(1 == getOrigin_~person#1); 1557738#L103 assume !(2 == getOrigin_~person#1); 1561823#L107 assume !(3 == getOrigin_~person#1); 1561213#L111 assume !(4 == getOrigin_~person#1); 1560566#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1560358#L120 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1560359#L653 assume !(0 == initPersonOnFloor_~floor#1); 1560486#L680 assume 1 == initPersonOnFloor_~floor#1; 1557330#L681 assume !(0 == initPersonOnFloor_~person#1); 1557331#L684 assume !(1 == initPersonOnFloor_~person#1); 1561396#L687 assume !(2 == initPersonOnFloor_~person#1); 1560380#L690 assume !(3 == initPersonOnFloor_~person#1); 1560381#L693 assume !(4 == initPersonOnFloor_~person#1); 1559941#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1559942#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1556866#L445 assume !(0 == callOnFloor_~floorID#1); 1556867#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1560362#L457-2 assume { :end_inline_callOnFloor } true; 1556609#L797 assume { :end_inline_initPersonOnFloor } true; 1556610#L3258 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1557319#L382 assume !(0 == isFloorCalling_~floorID#1); 1557970#L386 assume !(1 == isFloorCalling_~floorID#1); 1557971#L390 assume !(2 == isFloorCalling_~floorID#1); 1560018#L394 assume !(3 == isFloorCalling_~floorID#1); 1561028#L398 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1561029#L409 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1561194#L2724 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1557730#L2109 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1557262#L2083-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1557263#L1372-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1557629#L1389-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1558550#L1410-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1557555#L2094-1 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1558424#L2126 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1556089#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1556090#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1561595#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1558178#L382-3 assume !(0 == isFloorCalling_~floorID#1); 1558179#L386-3 assume !(1 == isFloorCalling_~floorID#1); 1560281#L390-3 assume !(2 == isFloorCalling_~floorID#1); 1556748#L394-3 assume !(3 == isFloorCalling_~floorID#1); 1556749#L398-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1558947#L409-3 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1561462#L2724-1 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1560410#L1964 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret34#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret35#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1; 1559893#L1986 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~17#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~17#1; 1556191#L2007 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 1560536#L1930 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_#t~ret24#1, stopRequestedInDirection__wrappee__empty_#t~ret25#1, stopRequestedInDirection__wrappee__empty_#t~ret26#1, stopRequestedInDirection__wrappee__empty_#t~ret27#1, stopRequestedInDirection__wrappee__empty_#t~ret28#1, stopRequestedInDirection__wrappee__empty_#t~ret29#1, stopRequestedInDirection__wrappee__empty_#t~ret30#1, stopRequestedInDirection__wrappee__empty_#t~ret31#1, stopRequestedInDirection__wrappee__empty_#t~ret32#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~4#1, stopRequestedInDirection__wrappee__empty_~tmp___1~4#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1557939#L1576-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 1557373#L1745-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 1557374#L1898-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1; 1562134#L1948 stopRequestedInDirection_#t~ret39#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~16#1 := stopRequestedInDirection_#t~ret39#1;havoc stopRequestedInDirection_#t~ret39#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1562129#L1977 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1562124#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1562125#L2021 assume !(1 == ~currentHeading~0); 1562289#L2031 assume !(0 == ~currentFloorID~0); 1557631#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1559436#L2037-1 assume { :end_inline_continueInDirection } true; 1562896#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1562895#L1372-5 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1562894#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1562889#L1464-6 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1562897#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1562293#L1381 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1560211#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1556032#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1558295#L2384 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1558296#L3285-2 assume !false; 1562297#L3286 [2022-11-02 20:51:09,269 INFO L750 eck$LassoCheckResult]: Loop: 1562297#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1564554#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1564553#L1195 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1564552#L3293 assume 1 != cleanup_~tmp___0~12#1; 1564537#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1564538#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1564516#L409-65 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1564517#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1565331#L1544 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1565330#L1557 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1565329#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1565328#L382-70 assume !(0 == isFloorCalling_~floorID#1); 1565327#L386-70 assume !(1 == isFloorCalling_~floorID#1); 1565326#L390-70 assume !(2 == isFloorCalling_~floorID#1); 1565325#L394-70 assume !(3 == isFloorCalling_~floorID#1); 1565324#L398-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1565323#L409-70 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1565322#L2724-3 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1565321#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1565319#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1564472#L1372-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1564473#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1564457#L1410-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1564456#L2094-3 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1564451#L2126-1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1564452#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1565309#L2263-2 assume !(0 != ~persons_0~0); 1566494#L2263-3 assume !(0 != ~persons_1~0); 1566489#L2277-1 assume !(0 != ~persons_2~0); 1566468#L2291-1 assume !(0 != ~persons_3~0); 1566466#L2305-1 assume !(0 != ~persons_4~0); 1566430#L2319-1 assume !(0 != ~persons_5~0); 1566429#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1566428#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1566333#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1566319#L645-6 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1566317#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1566315#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1566314#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1566052#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1566050#L645-7 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1566048#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1566046#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1566045#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1566030#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1566009#L645-8 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1566002#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1565999#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1565998#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1565960#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1565948#L645-9 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1565946#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1565944#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1565942#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1565940#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1565909#L645-10 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1565906#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1565904#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1565903#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1565859#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1565830#L645-11 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1565826#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1565823#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1565816#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1565810#L429-41 assume { :end_inline_resetCallOnFloor } true; 1565804#L2241-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1565801#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1564594#L1355-5 assume { :end_inline_resetFloorButton } true; 1564593#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1564592#L1372-11 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1564591#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1564585#L1464-13 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1565480#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1564570#L1381-1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1564561#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1564557#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1564556#L2384-1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1564555#L3285-2 assume !false; 1562297#L3286 [2022-11-02 20:51:09,270 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:51:09,270 INFO L85 PathProgramCache]: Analyzing trace with hash 1200994683, now seen corresponding path program 1 times [2022-11-02 20:51:09,270 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:51:09,271 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [264402892] [2022-11-02 20:51:09,271 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:51:09,271 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:51:09,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:51:09,331 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:51:09,332 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:51:09,332 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [264402892] [2022-11-02 20:51:09,332 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [264402892] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:51:09,332 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:51:09,333 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-02 20:51:09,333 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1552239899] [2022-11-02 20:51:09,333 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:51:09,333 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:51:09,334 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:51:09,334 INFO L85 PathProgramCache]: Analyzing trace with hash 1794998960, now seen corresponding path program 2 times [2022-11-02 20:51:09,334 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:51:09,334 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [855432854] [2022-11-02 20:51:09,334 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:51:09,335 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:51:09,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:51:09,431 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:51:09,431 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:51:09,431 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [855432854] [2022-11-02 20:51:09,432 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [855432854] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:51:09,432 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:51:09,432 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:51:09,432 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1828770463] [2022-11-02 20:51:09,432 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:51:09,433 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:51:09,433 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:51:09,434 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:51:09,434 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:51:09,434 INFO L87 Difference]: Start difference. First operand 14489 states and 26163 transitions. cyclomatic complexity: 11679 Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 2 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:51:09,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:51:09,717 INFO L93 Difference]: Finished difference Result 27140 states and 48953 transitions. [2022-11-02 20:51:09,718 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27140 states and 48953 transitions. [2022-11-02 20:51:09,800 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 12400 [2022-11-02 20:51:09,870 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27140 states to 27140 states and 48953 transitions. [2022-11-02 20:51:09,871 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18622 [2022-11-02 20:51:09,884 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18622 [2022-11-02 20:51:09,884 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27140 states and 48953 transitions. [2022-11-02 20:51:09,885 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:51:09,885 INFO L218 hiAutomatonCegarLoop]: Abstraction has 27140 states and 48953 transitions. [2022-11-02 20:51:09,899 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27140 states and 48953 transitions.