./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 21dc9f7e2ddd4ffb05ac36477bf46e7266bc68ad137742c8de338dbab6571869 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-13 21:46:47,087 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-13 21:46:47,088 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-13 21:46:47,104 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-13 21:46:47,104 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-13 21:46:47,106 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-13 21:46:47,108 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-13 21:46:47,110 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-13 21:46:47,113 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-13 21:46:47,114 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-13 21:46:47,115 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-13 21:46:47,117 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-13 21:46:47,117 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-13 21:46:47,119 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-13 21:46:47,120 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-13 21:46:47,122 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-13 21:46:47,123 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-13 21:46:47,124 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-13 21:46:47,127 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-13 21:46:47,130 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-13 21:46:47,132 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-13 21:46:47,133 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-13 21:46:47,134 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-13 21:46:47,134 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-13 21:46:47,136 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-13 21:46:47,136 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-13 21:46:47,137 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-13 21:46:47,137 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-13 21:46:47,137 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-13 21:46:47,138 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-13 21:46:47,138 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-13 21:46:47,139 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-13 21:46:47,139 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-13 21:46:47,140 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-13 21:46:47,140 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-13 21:46:47,140 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-13 21:46:47,141 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-13 21:46:47,141 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-13 21:46:47,141 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-13 21:46:47,142 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-13 21:46:47,142 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-13 21:46:47,143 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-12-13 21:46:47,156 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-13 21:46:47,156 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-13 21:46:47,157 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-13 21:46:47,157 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-13 21:46:47,157 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-13 21:46:47,157 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-13 21:46:47,158 INFO L138 SettingsManager]: * Use SBE=true [2022-12-13 21:46:47,158 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-12-13 21:46:47,158 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-12-13 21:46:47,158 INFO L138 SettingsManager]: * Use old map elimination=false [2022-12-13 21:46:47,158 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-12-13 21:46:47,158 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-12-13 21:46:47,158 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-12-13 21:46:47,158 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-13 21:46:47,158 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-13 21:46:47,158 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-12-13 21:46:47,159 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-13 21:46:47,159 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-13 21:46:47,159 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-13 21:46:47,159 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-12-13 21:46:47,159 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-12-13 21:46:47,159 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-12-13 21:46:47,159 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-13 21:46:47,159 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-13 21:46:47,159 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-12-13 21:46:47,159 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-13 21:46:47,160 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-12-13 21:46:47,160 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-13 21:46:47,160 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-12-13 21:46:47,160 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-13 21:46:47,160 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-12-13 21:46:47,161 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-12-13 21:46:47,161 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 21dc9f7e2ddd4ffb05ac36477bf46e7266bc68ad137742c8de338dbab6571869 [2022-12-13 21:46:47,316 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-13 21:46:47,335 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-13 21:46:47,337 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-13 21:46:47,338 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-13 21:46:47,338 INFO L275 PluginConnector]: CDTParser initialized [2022-12-13 21:46:47,339 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/../../sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c [2022-12-13 21:46:49,878 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-13 21:46:50,108 INFO L351 CDTParser]: Found 1 translation units. [2022-12-13 21:46:50,108 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c [2022-12-13 21:46:50,120 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/data/cdab31c63/d7888cc6abbd447190d8c347eab3460b/FLAG36c68b49d [2022-12-13 21:46:50,134 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/data/cdab31c63/d7888cc6abbd447190d8c347eab3460b [2022-12-13 21:46:50,137 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-13 21:46:50,138 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-13 21:46:50,140 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-13 21:46:50,140 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-13 21:46:50,144 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-13 21:46:50,144 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 09:46:50" (1/1) ... [2022-12-13 21:46:50,145 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@19871095 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:46:50, skipping insertion in model container [2022-12-13 21:46:50,146 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 09:46:50" (1/1) ... [2022-12-13 21:46:50,153 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-13 21:46:50,209 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-13 21:46:50,386 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c[5910,5923] [2022-12-13 21:46:50,606 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 21:46:50,620 INFO L203 MainTranslator]: Completed pre-run [2022-12-13 21:46:50,639 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/sv-benchmarks/c/product-lines/elevator_spec9_product31.cil.c[5910,5923] [2022-12-13 21:46:50,733 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 21:46:50,758 INFO L208 MainTranslator]: Completed translation [2022-12-13 21:46:50,759 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:46:50 WrapperNode [2022-12-13 21:46:50,759 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-13 21:46:50,760 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-13 21:46:50,760 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-13 21:46:50,760 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-13 21:46:50,767 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:46:50" (1/1) ... [2022-12-13 21:46:50,791 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:46:50" (1/1) ... [2022-12-13 21:46:50,949 INFO L138 Inliner]: procedures = 97, calls = 346, calls flagged for inlining = 199, calls inlined = 440, statements flattened = 14252 [2022-12-13 21:46:50,949 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-13 21:46:50,949 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-13 21:46:50,950 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-13 21:46:50,950 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-13 21:46:50,957 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:46:50" (1/1) ... [2022-12-13 21:46:50,957 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:46:50" (1/1) ... [2022-12-13 21:46:50,973 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:46:50" (1/1) ... [2022-12-13 21:46:50,973 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:46:50" (1/1) ... [2022-12-13 21:46:51,061 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:46:50" (1/1) ... [2022-12-13 21:46:51,111 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:46:50" (1/1) ... [2022-12-13 21:46:51,126 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:46:50" (1/1) ... [2022-12-13 21:46:51,139 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:46:50" (1/1) ... [2022-12-13 21:46:51,159 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-13 21:46:51,160 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-13 21:46:51,160 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-13 21:46:51,160 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-13 21:46:51,161 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:46:50" (1/1) ... [2022-12-13 21:46:51,166 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:46:51,174 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:46:51,186 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:46:51,189 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-12-13 21:46:51,224 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-13 21:46:51,224 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-13 21:46:51,224 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-13 21:46:51,224 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-13 21:46:51,357 INFO L235 CfgBuilder]: Building ICFG [2022-12-13 21:46:51,359 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-13 21:46:55,079 INFO L276 CfgBuilder]: Performing block encoding [2022-12-13 21:46:55,103 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-13 21:46:55,103 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-12-13 21:46:55,110 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 09:46:55 BoogieIcfgContainer [2022-12-13 21:46:55,110 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-13 21:46:55,112 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-12-13 21:46:55,112 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-12-13 21:46:55,115 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-12-13 21:46:55,115 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 21:46:55,115 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 13.12 09:46:50" (1/3) ... [2022-12-13 21:46:55,116 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@62043c9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.12 09:46:55, skipping insertion in model container [2022-12-13 21:46:55,116 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 21:46:55,116 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:46:50" (2/3) ... [2022-12-13 21:46:55,117 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@62043c9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.12 09:46:55, skipping insertion in model container [2022-12-13 21:46:55,117 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 21:46:55,117 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 09:46:55" (3/3) ... [2022-12-13 21:46:55,118 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec9_product31.cil.c [2022-12-13 21:46:55,202 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2022-12-13 21:46:55,202 INFO L304 stractBuchiCegarLoop]: Hoare is false [2022-12-13 21:46:55,202 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-12-13 21:46:55,202 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-12-13 21:46:55,202 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-12-13 21:46:55,202 INFO L308 stractBuchiCegarLoop]: Difference is false [2022-12-13 21:46:55,202 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-12-13 21:46:55,203 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-12-13 21:46:55,217 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3743 states, 3742 states have (on average 1.86851950828434) internal successors, (6992), 3742 states have internal predecessors, (6992), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:46:55,307 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1855 [2022-12-13 21:46:55,307 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:46:55,307 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:46:55,323 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:46:55,323 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:46:55,324 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-12-13 21:46:55,330 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3743 states, 3742 states have (on average 1.86851950828434) internal successors, (6992), 3742 states have internal predecessors, (6992), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:46:55,359 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1855 [2022-12-13 21:46:55,359 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:46:55,359 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:46:55,363 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:46:55,363 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:46:55,368 INFO L748 eck$LassoCheckResult]: Stem: 144#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 3662#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 2609#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2331#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 561#valid_product_returnLabel#1true main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1395#L3478true assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1237#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 3226#__utac_acc__Specification9_spec__1_returnLabel#1true assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 2087#L95true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 2048#getOrigin_returnLabel#1true bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2172#L653true assume 0 == initPersonOnFloor_~floor#1; 2451#L654true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 3372#L761-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 277#L445true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1799#L457-2true assume { :end_inline_callOnFloor } true; 790#initPersonOnFloor_returnLabel#1true assume { :end_inline_initPersonOnFloor } true; 348#bigMacCall_returnLabel#1true assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1038#L382true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1970#isFloorCalling_returnLabel#1true isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 3172#isExecutiveFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 570#L2109true assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 2734#getCurrentFloorID_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 3474#L2113true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 215#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 45#L2261true assume !(0 != timeShift_~tmp___9~2#1); 2980#L2352true assume 1 == ~doorState~0;~doorState~0 := 0; 3145#L2352-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 725#L382-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2216#isFloorCalling_returnLabel#4true isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 768#isExecutiveFloorCalling_returnLabel#2true stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1829#L1964true assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 3589#getCurrentFloorID_returnLabel#4true stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1319#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1739#L2360true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 2184#L2021true assume !(1 == ~currentHeading~0); 532#L2031true assume !(0 == ~currentFloorID~0); 1266#L2031-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 858#L2037-1true assume { :end_inline_continueInDirection } true; 1439#L2369-2true assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 818#getCurrentFloorID_returnLabel#6true __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 2597#L1432-6true assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 208#isEmpty_returnLabel#7true __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 3223#L1021true assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1838#L1031-1true assume { :end_inline___utac_acc__Specification9_spec__3 } true; 3430#timeShift_returnLabel#1true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1722#L3285-2true [2022-12-13 21:46:55,370 INFO L750 eck$LassoCheckResult]: Loop: 1722#L3285-2true assume !false; 733#L3286true cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 3737#L3289true assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 2601#isBlocked_returnLabel#1true cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1267#L3293true assume 1 != cleanup_~tmp___0~12#1; 1857#L3293-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1003#L382-65true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1993#isFloorCalling_returnLabel#66true anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 2296#L1480true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 108#anyStopRequested_returnLabel#1true isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 883#isIdle_returnLabel#1true cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 3687#L3305true assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1459#L382-70true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2632#isFloorCalling_returnLabel#71true isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1154#isExecutiveFloorCalling_returnLabel#4true stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 286#L2109-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 936#getCurrentFloorID_returnLabel#7true stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 3155#L2113-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1608#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 2271#L2261-2true assume !(0 != timeShift_~tmp___9~2#1); 645#L2352-3true assume 1 == ~doorState~0;~doorState~0 := 0; 2466#L2352-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 333#L382-73true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2603#isFloorCalling_returnLabel#74true isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 93#isExecutiveFloorCalling_returnLabel#5true stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1626#L1964-2true assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 3646#getCurrentFloorID_returnLabel#10true stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 921#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 2600#L2360-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1904#L2021-3true assume !(1 == ~currentHeading~0); 42#L2031-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1316#L2031-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3570#L2037-7true assume { :end_inline_continueInDirection } true; 2934#L2369-5true assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 2788#getCurrentFloorID_returnLabel#12true __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 860#L1432-13true assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 2690#isEmpty_returnLabel#14true __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1035#L1021-2true assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 2730#L1031-3true assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1578#timeShift_returnLabel#2true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1722#L3285-2true [2022-12-13 21:46:55,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:46:55,376 INFO L85 PathProgramCache]: Analyzing trace with hash -1924247499, now seen corresponding path program 1 times [2022-12-13 21:46:55,385 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:46:55,385 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [650704283] [2022-12-13 21:46:55,385 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:46:55,386 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:46:55,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:46:55,702 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:46:55,702 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:46:55,702 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [650704283] [2022-12-13 21:46:55,703 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [650704283] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:46:55,703 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:46:55,703 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 21:46:55,704 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1580748159] [2022-12-13 21:46:55,705 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:46:55,708 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:46:55,709 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:46:55,709 INFO L85 PathProgramCache]: Analyzing trace with hash 39229735, now seen corresponding path program 1 times [2022-12-13 21:46:55,710 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:46:55,710 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1160677960] [2022-12-13 21:46:55,710 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:46:55,710 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:46:55,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:46:55,840 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:46:55,840 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:46:55,841 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1160677960] [2022-12-13 21:46:55,841 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1160677960] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:46:55,841 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:46:55,841 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 21:46:55,841 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1478272341] [2022-12-13 21:46:55,842 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:46:55,843 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:46:55,844 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:46:55,879 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 21:46:55,880 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-12-13 21:46:55,892 INFO L87 Difference]: Start difference. First operand has 3743 states, 3742 states have (on average 1.86851950828434) internal successors, (6992), 3742 states have internal predecessors, (6992), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 7 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:01,586 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:47:01,586 INFO L93 Difference]: Finished difference Result 31753 states and 58868 transitions. [2022-12-13 21:47:01,587 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31753 states and 58868 transitions. [2022-12-13 21:47:01,760 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 13868 [2022-12-13 21:47:01,883 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31753 states to 31573 states and 58670 transitions. [2022-12-13 21:47:01,884 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31573 [2022-12-13 21:47:01,912 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31573 [2022-12-13 21:47:01,912 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31573 states and 58670 transitions. [2022-12-13 21:47:01,983 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 21:47:01,983 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31573 states and 58670 transitions. [2022-12-13 21:47:02,019 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31573 states and 58670 transitions. [2022-12-13 21:47:02,214 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31573 to 10643. [2022-12-13 21:47:02,230 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10643 states, 10643 states have (on average 1.8623508409283096) internal successors, (19821), 10642 states have internal predecessors, (19821), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:02,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10643 states to 10643 states and 19821 transitions. [2022-12-13 21:47:02,280 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10643 states and 19821 transitions. [2022-12-13 21:47:02,281 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-12-13 21:47:02,284 INFO L428 stractBuchiCegarLoop]: Abstraction has 10643 states and 19821 transitions. [2022-12-13 21:47:02,285 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-12-13 21:47:02,285 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10643 states and 19821 transitions. [2022-12-13 21:47:02,313 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 5377 [2022-12-13 21:47:02,314 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:47:02,314 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:47:02,317 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:02,317 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:02,317 INFO L748 eck$LassoCheckResult]: Stem: 35905#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 35906#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 39136#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 38951#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 36758#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 36759#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 37871#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 37872#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 38761#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 36783#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 38742#L653 assume 0 == initPersonOnFloor_~floor#1; 38830#L654 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 35949#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 36193#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 35816#L457-2 assume { :end_inline_callOnFloor } true; 37190#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 36360#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 36361#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 37576#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 38675#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 36776#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 36778#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 39498#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 39499#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 42526#L2261 assume !(0 != timeShift_~tmp___9~2#1); 42527#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 45957#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 45956#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 45955#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 45954#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 45953#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 39518#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 39451#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 45959#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 38840#L2021 assume !(1 == ~currentHeading~0); 36704#L2031 assume !(0 == ~currentFloorID~0); 36705#L2031-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 37300#L2037-1 assume { :end_inline_continueInDirection } true; 37301#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 37233#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 37234#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 36050#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 36051#L1021 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 35614#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 38556#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 38281#L3285-2 [2022-12-13 21:47:02,318 INFO L750 eck$LassoCheckResult]: Loop: 38281#L3285-2 assume !false; 37086#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 37087#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 39130#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 37911#L3293 assume 1 != cleanup_~tmp___0~12#1; 37912#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 37515#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 37516#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 38695#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 35818#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 35819#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 37337#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 39544#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 39565#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 41647#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 39770#L2109-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 39772#getCurrentFloorID_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 39760#L2113-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 39409#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 43456#L2261-2 assume !(0 != timeShift_~tmp___9~2#1); 43457#L2352-3 assume 1 == ~doorState~0;~doorState~0 := 0; 45766#L2352-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 45765#L382-73 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 45764#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 45763#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 38341#L1964-2 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 38342#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 45761#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 45759#L2360-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 38622#L2021-3 assume !(1 == ~currentHeading~0); 35650#L2031-9 assume !(0 == ~currentFloorID~0); 35651#L2031-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 37975#L2037-7 assume { :end_inline_continueInDirection } true; 36157#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 39244#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 37303#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 37016#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 37571#L1021-2 assume 0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 35708#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 38280#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 38281#L3285-2 [2022-12-13 21:47:02,318 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:02,318 INFO L85 PathProgramCache]: Analyzing trace with hash -1924247499, now seen corresponding path program 2 times [2022-12-13 21:47:02,319 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:02,319 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1787321961] [2022-12-13 21:47:02,319 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:02,319 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:02,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:02,396 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:02,396 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:02,396 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1787321961] [2022-12-13 21:47:02,396 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1787321961] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:02,396 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:02,397 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 21:47:02,397 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1481775246] [2022-12-13 21:47:02,397 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:02,397 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:47:02,398 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:02,398 INFO L85 PathProgramCache]: Analyzing trace with hash -353797275, now seen corresponding path program 1 times [2022-12-13 21:47:02,398 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:02,398 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [560430248] [2022-12-13 21:47:02,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:02,399 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:02,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:02,443 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:02,443 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:02,444 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [560430248] [2022-12-13 21:47:02,444 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [560430248] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:02,444 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:02,444 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 21:47:02,444 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [801327362] [2022-12-13 21:47:02,445 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:02,445 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:47:02,445 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:47:02,445 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 21:47:02,446 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 21:47:02,446 INFO L87 Difference]: Start difference. First operand 10643 states and 19821 transitions. cyclomatic complexity: 9180 Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:02,892 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:47:02,892 INFO L93 Difference]: Finished difference Result 26359 states and 49073 transitions. [2022-12-13 21:47:02,892 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26359 states and 49073 transitions. [2022-12-13 21:47:03,020 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 18489 [2022-12-13 21:47:03,112 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26359 states to 26359 states and 49073 transitions. [2022-12-13 21:47:03,112 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26359 [2022-12-13 21:47:03,150 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26359 [2022-12-13 21:47:03,151 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26359 states and 49073 transitions. [2022-12-13 21:47:03,168 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 21:47:03,168 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26359 states and 49073 transitions. [2022-12-13 21:47:03,192 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26359 states and 49073 transitions. [2022-12-13 21:47:03,402 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26359 to 10655. [2022-12-13 21:47:03,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10655 states, 10655 states have (on average 1.8613796339746598) internal successors, (19833), 10654 states have internal predecessors, (19833), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:03,461 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10655 states to 10655 states and 19833 transitions. [2022-12-13 21:47:03,461 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10655 states and 19833 transitions. [2022-12-13 21:47:03,461 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 21:47:03,462 INFO L428 stractBuchiCegarLoop]: Abstraction has 10655 states and 19833 transitions. [2022-12-13 21:47:03,462 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-12-13 21:47:03,462 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10655 states and 19833 transitions. [2022-12-13 21:47:03,484 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 5383 [2022-12-13 21:47:03,484 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:47:03,484 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:47:03,488 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:03,489 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:03,489 INFO L748 eck$LassoCheckResult]: Stem: 72917#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 72918#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 76295#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 76094#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 73770#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 73771#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 74917#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 74918#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 75881#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 73794#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 75856#L653 assume 0 == initPersonOnFloor_~floor#1; 75961#L654 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 72961#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 73204#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 72829#L457-2 assume { :end_inline_callOnFloor } true; 74210#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 73371#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 73372#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 74613#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 75779#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 73788#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 73789#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 76382#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 73074#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 72670#L2261 assume !(0 != timeShift_~tmp___9~2#1); 72671#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 76529#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 76612#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 77189#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 77188#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 75642#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 75643#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 75035#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 75036#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 75533#L2021 assume !(1 == ~currentHeading~0); 73716#L2031 assume !(0 == ~currentFloorID~0); 73717#L2031-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 74325#L2037-1 assume { :end_inline_continueInDirection } true; 74326#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 79276#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 76284#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 73386#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 79277#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 79268#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 79271#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 79260#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 79258#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 79257#L3285-2 [2022-12-13 21:47:03,489 INFO L750 eck$LassoCheckResult]: Loop: 79257#L3285-2 assume !false; 79256#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 79255#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 79254#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 79253#L3293 assume 1 != cleanup_~tmp___0~12#1; 79252#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 79243#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 79232#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 79224#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 79215#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 79214#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 79213#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 79212#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 76975#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 79208#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 77885#L2109-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 77880#getCurrentFloorID_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 77875#L2113-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 75400#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 75401#L2261-2 assume !(0 != timeShift_~tmp___9~2#1); 76042#L2352-3 assume 1 == ~doorState~0;~doorState~0 := 0; 76206#L2352-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 76207#L382-73 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 81340#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 72791#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 72792#L1964-2 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 76775#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 73105#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 74429#L2360-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 76286#L2021-3 assume !(1 == ~currentHeading~0); 81069#L2031-9 assume !(0 == ~currentFloorID~0); 75029#L2031-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 75030#L2037-7 assume { :end_inline_continueInDirection } true; 79307#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 79306#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 74327#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 74030#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 79311#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 79304#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 79295#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 79261#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 79259#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 79257#L3285-2 [2022-12-13 21:47:03,490 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:03,490 INFO L85 PathProgramCache]: Analyzing trace with hash 1929156568, now seen corresponding path program 1 times [2022-12-13 21:47:03,490 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:03,490 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [697223208] [2022-12-13 21:47:03,490 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:03,491 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:03,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:03,565 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:03,565 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:03,566 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [697223208] [2022-12-13 21:47:03,566 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [697223208] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:03,566 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:03,566 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 21:47:03,566 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1299132653] [2022-12-13 21:47:03,566 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:03,567 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:47:03,567 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:03,567 INFO L85 PathProgramCache]: Analyzing trace with hash -696385528, now seen corresponding path program 1 times [2022-12-13 21:47:03,567 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:03,568 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [464820143] [2022-12-13 21:47:03,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:03,568 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:03,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 21:47:03,579 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 21:47:03,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 21:47:03,622 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 21:47:04,756 INFO L210 LassoAnalysis]: Preferences: [2022-12-13 21:47:04,756 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-12-13 21:47:04,756 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-12-13 21:47:04,756 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-12-13 21:47:04,757 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-12-13 21:47:04,757 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:04,757 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-12-13 21:47:04,757 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-12-13 21:47:04,757 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec9_product31.cil.c_Iteration3_Loop [2022-12-13 21:47:04,757 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-12-13 21:47:04,757 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-12-13 21:47:04,780 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,789 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,790 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,792 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,796 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,798 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,799 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,801 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,802 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,804 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,812 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,816 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,817 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,821 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,822 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,829 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,831 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,832 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,833 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,835 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,836 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,840 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,843 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,844 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,849 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,850 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,852 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,853 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,858 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,859 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,873 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,877 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,879 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,880 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,881 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,883 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,884 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,886 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,887 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,891 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,893 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,894 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,895 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,898 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,899 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,900 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,901 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,903 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,904 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,905 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,907 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,908 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,910 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,911 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,912 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,917 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,918 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,922 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,923 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,924 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:04,925 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:05,327 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-12-13 21:47:05,328 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-12-13 21:47:05,330 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,330 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,331 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,332 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2022-12-13 21:47:05,333 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,333 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,347 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,347 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret12#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret12#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,351 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2022-12-13 21:47:05,351 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,351 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,352 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,353 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2022-12-13 21:47:05,354 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,354 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,365 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,366 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret21#1=0} Honda state: {ULTIMATE.start_isIdle_#t~ret21#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,368 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Forceful destruction successful, exit code 0 [2022-12-13 21:47:05,368 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,368 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,369 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,370 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2022-12-13 21:47:05,371 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,371 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,383 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,383 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp~16#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp~16#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,386 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Ended with exit code 0 [2022-12-13 21:47:05,386 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,386 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,387 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,388 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2022-12-13 21:47:05,389 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,390 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,408 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,408 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~retValue_acc~16#1=1, ULTIMATE.start_timeShift_~tmp___8~2#1=1, ULTIMATE.start_stopRequestedInDirection_#res#1=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~retValue_acc~16#1=1, ULTIMATE.start_timeShift_~tmp___8~2#1=1, ULTIMATE.start_stopRequestedInDirection_#res#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,411 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2022-12-13 21:47:05,411 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,412 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,412 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,413 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2022-12-13 21:47:05,415 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,415 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,426 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,426 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~6#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~6#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,429 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Ended with exit code 0 [2022-12-13 21:47:05,429 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,429 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,430 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,431 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2022-12-13 21:47:05,432 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,432 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,444 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,445 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret62#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret62#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,447 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Ended with exit code 0 [2022-12-13 21:47:05,447 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,448 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,448 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,449 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2022-12-13 21:47:05,451 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,451 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,462 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,462 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret48#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret48#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,465 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Ended with exit code 0 [2022-12-13 21:47:05,465 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,465 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,466 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,478 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2022-12-13 21:47:05,479 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,479 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,490 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,490 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~11#1=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~11#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,492 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2022-12-13 21:47:05,493 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,493 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,494 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,494 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2022-12-13 21:47:05,496 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,496 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,507 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,508 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret71#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret71#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,510 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Ended with exit code 0 [2022-12-13 21:47:05,510 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,510 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,511 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,512 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2022-12-13 21:47:05,513 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,514 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,537 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,537 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~5#1=-4, ~calls_0~0=-4, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~23#1=-4, ULTIMATE.start_isFloorCalling_#res#1=-4, ULTIMATE.start_anyStopRequested_~tmp___3~0#1=-4, ULTIMATE.start_isExecutiveFloorCalling_#res#1=-4, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~14#1=-4, ULTIMATE.start_isFloorCalling_~retValue_acc~3#1=-4} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~5#1=-4, ~calls_0~0=-4, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~23#1=-4, ULTIMATE.start_isFloorCalling_#res#1=-4, ULTIMATE.start_anyStopRequested_~tmp___3~0#1=-4, ULTIMATE.start_isExecutiveFloorCalling_#res#1=-4, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~14#1=-4, ULTIMATE.start_isFloorCalling_~retValue_acc~3#1=-4} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,539 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Ended with exit code 0 [2022-12-13 21:47:05,540 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,540 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,541 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,541 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2022-12-13 21:47:05,543 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,543 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,561 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,561 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_~tmp~7#1=1, ULTIMATE.start_anyStopRequested_#res#1=1, ULTIMATE.start_anyStopRequested_~retValue_acc~12#1=1} Honda state: {ULTIMATE.start_isIdle_~tmp~7#1=1, ULTIMATE.start_anyStopRequested_#res#1=1, ULTIMATE.start_anyStopRequested_~retValue_acc~12#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,563 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Ended with exit code 0 [2022-12-13 21:47:05,563 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,564 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,564 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,565 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2022-12-13 21:47:05,567 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,567 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,579 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,579 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret11#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification9_spec__3_#t~ret11#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,582 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Ended with exit code 0 [2022-12-13 21:47:05,582 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,582 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,583 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,583 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2022-12-13 21:47:05,585 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,585 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,604 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,604 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls#1=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls#1=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,606 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Forceful destruction successful, exit code 0 [2022-12-13 21:47:05,607 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,607 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,608 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,608 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2022-12-13 21:47:05,610 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,610 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,621 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,621 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret20#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret20#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,624 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Forceful destruction successful, exit code 0 [2022-12-13 21:47:05,624 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,624 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,625 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,625 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2022-12-13 21:47:05,627 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,627 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,650 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,650 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#in~dir#1=6, ULTIMATE.start_stopRequestedInDirection_#in~dir#1=6, ULTIMATE.start_continueInDirection_~dir#1=6, ULTIMATE.start_stopRequestedInDirection_~dir#1=6, ~currentHeading~0=6} Honda state: {ULTIMATE.start_continueInDirection_#in~dir#1=6, ULTIMATE.start_stopRequestedInDirection_#in~dir#1=6, ULTIMATE.start_continueInDirection_~dir#1=6, ULTIMATE.start_stopRequestedInDirection_~dir#1=6, ~currentHeading~0=6} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,653 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Ended with exit code 0 [2022-12-13 21:47:05,653 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,654 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,654 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,655 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2022-12-13 21:47:05,656 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,657 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,667 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,667 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret47#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret47#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,670 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Forceful destruction successful, exit code 0 [2022-12-13 21:47:05,670 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,670 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,671 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,671 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2022-12-13 21:47:05,673 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,673 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,684 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,684 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~2#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~2#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,686 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Forceful destruction successful, exit code 0 [2022-12-13 21:47:05,686 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,686 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,687 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,688 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2022-12-13 21:47:05,689 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,689 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,700 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,701 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___0~10#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___0~10#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,703 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Forceful destruction successful, exit code 0 [2022-12-13 21:47:05,703 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,703 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,704 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,705 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2022-12-13 21:47:05,706 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,706 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,718 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,718 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret132#1=0} Honda state: {ULTIMATE.start_cleanup_#t~ret132#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,720 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Forceful destruction successful, exit code 0 [2022-12-13 21:47:05,721 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,721 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,721 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,722 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2022-12-13 21:47:05,724 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,724 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,735 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,735 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp~6#1=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp~6#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,737 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Ended with exit code 0 [2022-12-13 21:47:05,737 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,738 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,738 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,739 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2022-12-13 21:47:05,740 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,740 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,758 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,758 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~20#1=0, ULTIMATE.start_timeShift_~tmp___9~2#1=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~20#1=0, ULTIMATE.start_timeShift_~tmp___9~2#1=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,761 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Forceful destruction successful, exit code 0 [2022-12-13 21:47:05,761 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,761 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,762 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,763 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2022-12-13 21:47:05,764 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,764 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,780 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,780 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0#1=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~1#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0#1=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~1#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,783 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Ended with exit code 0 [2022-12-13 21:47:05,783 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,783 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,784 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,785 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2022-12-13 21:47:05,786 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,786 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,800 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 21:47:05,800 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret37#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret37#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 21:47:05,803 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Ended with exit code 0 [2022-12-13 21:47:05,803 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,803 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,804 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,804 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2022-12-13 21:47:05,806 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 21:47:05,806 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:05,819 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Ended with exit code 0 [2022-12-13 21:47:05,819 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:05,819 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:05,820 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:05,821 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2022-12-13 21:47:05,822 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-12-13 21:47:05,822 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 21:47:06,373 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-12-13 21:47:06,376 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Ended with exit code 0 [2022-12-13 21:47:06,376 INFO L210 LassoAnalysis]: Preferences: [2022-12-13 21:47:06,376 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-12-13 21:47:06,376 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-12-13 21:47:06,376 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-12-13 21:47:06,377 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-12-13 21:47:06,377 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:06,377 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-12-13 21:47:06,377 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-12-13 21:47:06,377 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec9_product31.cil.c_Iteration3_Loop [2022-12-13 21:47:06,377 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-12-13 21:47:06,377 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-12-13 21:47:06,379 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,381 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,385 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,387 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,388 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,389 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,390 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,391 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,392 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,393 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,397 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,404 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,406 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,409 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,412 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,413 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,418 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,428 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,429 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,433 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,434 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,435 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,436 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,438 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,439 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,440 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,443 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,447 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,448 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,449 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,450 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,451 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,452 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,453 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,454 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,457 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,458 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,459 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,460 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,461 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,462 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,463 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,464 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,465 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,466 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,467 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,468 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,469 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,471 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,472 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,473 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,474 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,475 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,477 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,478 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,482 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,486 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,487 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,489 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,490 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,491 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 21:47:06,918 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-12-13 21:47:06,922 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-12-13 21:47:06,923 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:06,923 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:06,923 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:06,924 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2022-12-13 21:47:06,926 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 21:47:06,936 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 21:47:06,936 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 21:47:06,936 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 21:47:06,936 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 21:47:06,936 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 21:47:06,938 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 21:47:06,938 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 21:47:06,939 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 21:47:06,941 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Ended with exit code 0 [2022-12-13 21:47:06,942 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:06,942 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:06,943 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:06,943 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2022-12-13 21:47:06,945 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 21:47:06,955 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 21:47:06,955 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 21:47:06,955 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 21:47:06,955 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 21:47:06,955 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 21:47:06,956 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 21:47:06,956 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 21:47:06,957 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 21:47:06,959 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Forceful destruction successful, exit code 0 [2022-12-13 21:47:06,959 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:06,959 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:06,960 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:06,961 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2022-12-13 21:47:06,962 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 21:47:06,972 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 21:47:06,972 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 21:47:06,972 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 21:47:06,972 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 21:47:06,972 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 21:47:06,973 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 21:47:06,973 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 21:47:06,974 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 21:47:06,976 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Forceful destruction successful, exit code 0 [2022-12-13 21:47:06,977 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:06,977 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:06,977 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:06,978 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2022-12-13 21:47:06,979 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 21:47:06,989 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 21:47:06,989 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 21:47:06,989 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 21:47:06,989 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 21:47:06,989 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 21:47:06,990 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 21:47:06,990 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 21:47:06,991 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 21:47:06,993 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Ended with exit code 0 [2022-12-13 21:47:06,994 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:06,994 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:06,994 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:06,995 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Waiting until timeout for monitored process [2022-12-13 21:47:06,996 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 21:47:07,007 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 21:47:07,007 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 21:47:07,007 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 21:47:07,007 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 21:47:07,007 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 21:47:07,008 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 21:47:07,008 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 21:47:07,009 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 21:47:07,011 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Ended with exit code 0 [2022-12-13 21:47:07,011 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:07,012 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:07,012 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:07,013 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Waiting until timeout for monitored process [2022-12-13 21:47:07,015 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 21:47:07,025 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 21:47:07,025 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 21:47:07,025 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 21:47:07,025 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 21:47:07,025 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 21:47:07,026 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 21:47:07,026 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 21:47:07,027 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 21:47:07,029 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Ended with exit code 0 [2022-12-13 21:47:07,030 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:07,030 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:07,031 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:07,031 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Waiting until timeout for monitored process [2022-12-13 21:47:07,033 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 21:47:07,042 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 21:47:07,042 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 21:47:07,042 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 21:47:07,043 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 21:47:07,043 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 21:47:07,043 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 21:47:07,043 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 21:47:07,045 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 21:47:07,047 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Ended with exit code 0 [2022-12-13 21:47:07,047 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:07,047 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:07,048 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:07,049 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Waiting until timeout for monitored process [2022-12-13 21:47:07,050 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 21:47:07,060 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 21:47:07,060 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 21:47:07,061 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 21:47:07,061 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 21:47:07,061 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 21:47:07,061 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 21:47:07,061 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 21:47:07,063 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 21:47:07,065 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Ended with exit code 0 [2022-12-13 21:47:07,065 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:07,065 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:07,066 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:07,067 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Waiting until timeout for monitored process [2022-12-13 21:47:07,068 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 21:47:07,078 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 21:47:07,078 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 21:47:07,078 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 21:47:07,078 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 21:47:07,078 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 21:47:07,078 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 21:47:07,078 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 21:47:07,080 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 21:47:07,082 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Ended with exit code 0 [2022-12-13 21:47:07,082 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:07,082 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:07,083 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:07,084 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Waiting until timeout for monitored process [2022-12-13 21:47:07,085 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 21:47:07,095 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 21:47:07,096 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 21:47:07,096 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 21:47:07,096 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 21:47:07,096 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 21:47:07,097 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 21:47:07,097 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 21:47:07,100 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 21:47:07,102 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Ended with exit code 0 [2022-12-13 21:47:07,102 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:07,102 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:07,103 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:07,104 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Waiting until timeout for monitored process [2022-12-13 21:47:07,105 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 21:47:07,115 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 21:47:07,116 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 21:47:07,116 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 21:47:07,116 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2022-12-13 21:47:07,116 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 21:47:07,120 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2022-12-13 21:47:07,120 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 21:47:07,127 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 21:47:07,129 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Ended with exit code 0 [2022-12-13 21:47:07,129 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:07,129 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:07,130 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:07,138 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Waiting until timeout for monitored process [2022-12-13 21:47:07,139 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 21:47:07,149 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 21:47:07,149 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 21:47:07,149 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 21:47:07,149 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 21:47:07,149 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 21:47:07,150 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 21:47:07,150 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 21:47:07,151 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 21:47:07,154 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Ended with exit code 0 [2022-12-13 21:47:07,154 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:07,154 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:07,155 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:07,155 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Waiting until timeout for monitored process [2022-12-13 21:47:07,157 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 21:47:07,168 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 21:47:07,168 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 21:47:07,168 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 21:47:07,168 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 21:47:07,168 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 21:47:07,169 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 21:47:07,169 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 21:47:07,170 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 21:47:07,172 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Ended with exit code 0 [2022-12-13 21:47:07,173 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:07,173 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:07,173 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:07,174 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Waiting until timeout for monitored process [2022-12-13 21:47:07,176 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 21:47:07,185 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 21:47:07,185 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 21:47:07,186 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 21:47:07,186 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 21:47:07,186 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 21:47:07,186 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 21:47:07,187 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 21:47:07,189 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 21:47:07,191 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Forceful destruction successful, exit code 0 [2022-12-13 21:47:07,191 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:07,191 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:07,192 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:07,193 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Waiting until timeout for monitored process [2022-12-13 21:47:07,194 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 21:47:07,204 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 21:47:07,205 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 21:47:07,205 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 21:47:07,205 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 21:47:07,205 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 21:47:07,205 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 21:47:07,205 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 21:47:07,207 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 21:47:07,209 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Ended with exit code 0 [2022-12-13 21:47:07,209 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:07,209 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:07,210 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:07,211 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Waiting until timeout for monitored process [2022-12-13 21:47:07,212 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 21:47:07,222 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 21:47:07,222 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 21:47:07,223 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 21:47:07,223 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2022-12-13 21:47:07,223 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 21:47:07,225 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2022-12-13 21:47:07,225 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 21:47:07,228 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 21:47:07,230 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Forceful destruction successful, exit code 0 [2022-12-13 21:47:07,231 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:07,231 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:07,231 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:07,232 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Waiting until timeout for monitored process [2022-12-13 21:47:07,234 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 21:47:07,244 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 21:47:07,244 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 21:47:07,244 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 21:47:07,244 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 21:47:07,244 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 21:47:07,245 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 21:47:07,245 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 21:47:07,250 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-12-13 21:47:07,256 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2022-12-13 21:47:07,257 INFO L444 ModelExtractionUtils]: 6 out of 10 variables were initially zero. Simplification set additionally 2 variables to zero. [2022-12-13 21:47:07,258 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 21:47:07,258 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:47:07,284 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 21:47:07,285 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Waiting until timeout for monitored process [2022-12-13 21:47:07,286 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-12-13 21:47:07,286 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-12-13 21:47:07,286 INFO L513 LassoAnalysis]: Proved termination. [2022-12-13 21:47:07,287 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2022-12-13 21:47:07,289 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Forceful destruction successful, exit code 0 [2022-12-13 21:47:07,290 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-12-13 21:47:07,304 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:07,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:07,378 INFO L263 TraceCheckSpWp]: Trace formula consists of 613 conjuncts, 2 conjunts are in the unsatisfiable core [2022-12-13 21:47:07,380 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 21:47:07,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:07,452 INFO L263 TraceCheckSpWp]: Trace formula consists of 163 conjuncts, 45 conjunts are in the unsatisfiable core [2022-12-13 21:47:07,454 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 21:47:07,971 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:07,977 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 14 loop predicates [2022-12-13 21:47:07,978 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 10655 states and 19833 transitions. cyclomatic complexity: 9180 Second operand has 16 states, 16 states have (on average 5.5625) internal successors, (89), 16 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:08,263 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5a856560-cbae-4aa1-bf9a-e67916cf1fe3/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Ended with exit code 0 [2022-12-13 21:47:25,855 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 10655 states and 19833 transitions. cyclomatic complexity: 9180. Second operand has 16 states, 16 states have (on average 5.5625) internal successors, (89), 16 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 140111 states and 258435 transitions. Complement of second has 252 states. [2022-12-13 21:47:25,857 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 127 states 1 stem states 124 non-accepting loop states 1 accepting loop states [2022-12-13 21:47:25,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 16 states have (on average 5.5625) internal successors, (89), 16 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:25,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 127 states to 127 states and 59684 transitions. [2022-12-13 21:47:25,890 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 127 states and 59684 transitions. Stem has 47 letters. Loop has 42 letters. [2022-12-13 21:47:25,892 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 21:47:25,892 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 127 states and 59684 transitions. Stem has 89 letters. Loop has 42 letters. [2022-12-13 21:47:25,892 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 21:47:25,893 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 127 states and 59684 transitions. Stem has 47 letters. Loop has 84 letters. [2022-12-13 21:47:25,894 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 21:47:25,894 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 140111 states and 258435 transitions. [2022-12-13 21:47:26,357 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 40549 [2022-12-13 21:47:26,859 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 140111 states to 134728 states and 248009 transitions. [2022-12-13 21:47:26,859 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 72686 [2022-12-13 21:47:26,901 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 72691 [2022-12-13 21:47:26,901 INFO L73 IsDeterministic]: Start isDeterministic. Operand 134728 states and 248009 transitions. [2022-12-13 21:47:26,903 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:47:26,903 INFO L218 hiAutomatonCegarLoop]: Abstraction has 134728 states and 248009 transitions. [2022-12-13 21:47:26,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 134728 states and 248009 transitions. [2022-12-13 21:47:27,625 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 134728 to 27152. [2022-12-13 21:47:27,653 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27152 states, 27152 states have (on average 1.8509133765468473) internal successors, (50256), 27151 states have internal predecessors, (50256), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:27,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27152 states to 27152 states and 50256 transitions. [2022-12-13 21:47:27,703 INFO L240 hiAutomatonCegarLoop]: Abstraction has 27152 states and 50256 transitions. [2022-12-13 21:47:27,703 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:47:27,703 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 21:47:27,703 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 21:47:27,703 INFO L87 Difference]: Start difference. First operand 27152 states and 50256 transitions. Second operand has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:27,824 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:47:27,824 INFO L93 Difference]: Finished difference Result 27152 states and 50250 transitions. [2022-12-13 21:47:27,824 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27152 states and 50250 transitions. [2022-12-13 21:47:27,914 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 11222 [2022-12-13 21:47:27,988 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27152 states to 27152 states and 50250 transitions. [2022-12-13 21:47:27,988 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18902 [2022-12-13 21:47:28,002 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18902 [2022-12-13 21:47:28,002 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27152 states and 50250 transitions. [2022-12-13 21:47:28,003 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:47:28,003 INFO L218 hiAutomatonCegarLoop]: Abstraction has 27152 states and 50250 transitions. [2022-12-13 21:47:28,018 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27152 states and 50250 transitions. [2022-12-13 21:47:28,428 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27152 to 27152. [2022-12-13 21:47:28,457 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27152 states, 27152 states have (on average 1.8506923983500294) internal successors, (50250), 27151 states have internal predecessors, (50250), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:28,515 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27152 states to 27152 states and 50250 transitions. [2022-12-13 21:47:28,516 INFO L240 hiAutomatonCegarLoop]: Abstraction has 27152 states and 50250 transitions. [2022-12-13 21:47:28,516 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 21:47:28,517 INFO L428 stractBuchiCegarLoop]: Abstraction has 27152 states and 50250 transitions. [2022-12-13 21:47:28,517 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-12-13 21:47:28,517 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27152 states and 50250 transitions. [2022-12-13 21:47:28,585 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 11222 [2022-12-13 21:47:28,585 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:47:28,585 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:47:28,587 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:28,587 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:28,588 INFO L748 eck$LassoCheckResult]: Stem: 278941#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 278942#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 283901#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 283608#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 280221#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 280222#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 281938#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 281939#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 283301#L95 assume !(0 == getOrigin_~person#1); 280255#L99 assume !(1 == getOrigin_~person#1); 280256#L103 assume !(2 == getOrigin_~person#1); 284515#L107 assume !(3 == getOrigin_~person#1); 283809#L111 assume !(4 == getOrigin_~person#1); 283121#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 283122#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 283263#L653 assume 0 == initPersonOnFloor_~floor#1; 283409#L654 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 278996#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 279375#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 278805#L457-2 assume { :end_inline_callOnFloor } true; 280893#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 279626#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 279627#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 281471#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 283159#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 280247#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 280248#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 284043#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 284577#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 285338#L2261 assume !(0 != timeShift_~tmp___9~2#1); 285337#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 285335#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 285332#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 285331#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 280828#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 280829#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 282979#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 284613#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 282823#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 282824#L2021 assume !(1 == ~currentHeading~0); 285819#L2031 assume !(0 == ~currentFloorID~0); 285810#L2031-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 281056#L2037-1 assume { :end_inline_continueInDirection } true; 281057#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 287478#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 287467#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 287462#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 287461#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 287459#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 287460#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 287457#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 287456#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 287417#L3285-2 assume !false; 287418#L3286 [2022-12-13 21:47:28,588 INFO L750 eck$LassoCheckResult]: Loop: 287418#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 299799#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 299798#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 299797#L3293 assume 1 != cleanup_~tmp___0~12#1; 299796#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 299795#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 299794#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 299778#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 299769#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 299768#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 299767#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 299766#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 293498#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 299765#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 299763#L2109-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 299764#getCurrentFloorID_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 303713#L2113-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 282628#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 282629#L2261-2 assume !(0 != timeShift_~tmp___9~2#1); 280457#L2352-3 assume 1 == ~doorState~0;~doorState~0 := 0; 280458#L2352-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 279572#L382-73 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 279573#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 278753#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 278754#L1964-2 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 282663#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 281203#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 281204#L2360-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 283888#L2021-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 305501#isTopFloor_returnLabel#13 continueInDirection_#t~ret40#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret40#1;havoc continueInDirection_#t~ret40#1; 305497#L2025-9 assume 0 != continueInDirection_~tmp~11#1;~currentHeading~0 := 0; 305496#L2031-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 284609#L2037-7 assume { :end_inline_continueInDirection } true; 279310#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 299829#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 299828#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 299823#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 299835#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 299820#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 299811#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 299807#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 299806#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 299801#L3285-2 assume !false; 287418#L3286 [2022-12-13 21:47:28,589 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:28,589 INFO L85 PathProgramCache]: Analyzing trace with hash -503275981, now seen corresponding path program 1 times [2022-12-13 21:47:28,589 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:28,589 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [204036289] [2022-12-13 21:47:28,589 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:28,590 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:28,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:28,736 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:28,737 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:28,737 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [204036289] [2022-12-13 21:47:28,737 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [204036289] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:28,737 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:28,737 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 21:47:28,737 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [730322021] [2022-12-13 21:47:28,738 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:28,738 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:47:28,738 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:28,738 INFO L85 PathProgramCache]: Analyzing trace with hash -389079207, now seen corresponding path program 1 times [2022-12-13 21:47:28,738 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:28,738 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [559833125] [2022-12-13 21:47:28,739 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:28,739 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:28,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:28,940 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:28,940 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:28,940 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [559833125] [2022-12-13 21:47:28,941 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [559833125] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:28,941 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:28,941 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-12-13 21:47:28,941 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [473213243] [2022-12-13 21:47:28,941 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:28,941 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:47:28,941 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:47:28,942 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-12-13 21:47:28,942 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2022-12-13 21:47:28,942 INFO L87 Difference]: Start difference. First operand 27152 states and 50250 transitions. cyclomatic complexity: 23105 Second operand has 11 states, 11 states have (on average 3.909090909090909) internal successors, (43), 11 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:39,151 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:47:39,151 INFO L93 Difference]: Finished difference Result 225660 states and 417153 transitions. [2022-12-13 21:47:39,151 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 225660 states and 417153 transitions. [2022-12-13 21:47:39,912 INFO L131 ngComponentsAnalysis]: Automaton has 36 accepting balls. 120180 [2022-12-13 21:47:40,578 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 225660 states to 225660 states and 417153 transitions. [2022-12-13 21:47:40,578 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 149224 [2022-12-13 21:47:40,641 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 149224 [2022-12-13 21:47:40,642 INFO L73 IsDeterministic]: Start isDeterministic. Operand 225660 states and 417153 transitions. [2022-12-13 21:47:40,649 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:47:40,650 INFO L218 hiAutomatonCegarLoop]: Abstraction has 225660 states and 417153 transitions. [2022-12-13 21:47:40,755 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 225660 states and 417153 transitions. [2022-12-13 21:47:41,735 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 225660 to 41869. [2022-12-13 21:47:41,766 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41869 states, 41869 states have (on average 1.8446344550861018) internal successors, (77233), 41868 states have internal predecessors, (77233), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:41,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41869 states to 41869 states and 77233 transitions. [2022-12-13 21:47:41,854 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41869 states and 77233 transitions. [2022-12-13 21:47:41,854 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 69 states. [2022-12-13 21:47:41,855 INFO L428 stractBuchiCegarLoop]: Abstraction has 41869 states and 77233 transitions. [2022-12-13 21:47:41,855 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-12-13 21:47:41,855 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41869 states and 77233 transitions. [2022-12-13 21:47:41,973 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:41,974 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:47:41,974 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:47:41,975 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:41,976 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:41,976 INFO L748 eck$LassoCheckResult]: Stem: 531911#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 531912#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 537097#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 536749#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 533210#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 533211#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 534972#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 534973#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 536415#L95 assume !(0 == getOrigin_~person#1); 533245#L99 assume !(1 == getOrigin_~person#1); 533246#L103 assume !(2 == getOrigin_~person#1); 537764#L107 assume !(3 == getOrigin_~person#1); 536979#L111 assume !(4 == getOrigin_~person#1); 536239#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 536240#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 536381#L653 assume 0 == initPersonOnFloor_~floor#1; 536534#L654 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 531970#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 532343#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 531778#L457-2 assume { :end_inline_callOnFloor } true; 533900#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 532605#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 532606#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 534495#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 536274#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 538093#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 538092#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 537827#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 537828#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 531560#L2261 assume !(0 != timeShift_~tmp___9~2#1); 531561#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 537617#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 537618#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 538514#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 538513#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 538512#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 537886#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 535144#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 535145#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 535917#L2021 assume !(1 == ~currentHeading~0); 533129#L2031 assume !(0 == ~currentFloorID~0); 533130#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 540997#L2037-1 assume { :end_inline_continueInDirection } true; 540993#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 540991#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 540984#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 540975#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 540979#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 540953#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 540956#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 540945#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 540943#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 540940#L3285-2 assume !false; 540941#L3286 [2022-12-13 21:47:41,977 INFO L750 eck$LassoCheckResult]: Loop: 540941#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 559195#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 559194#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 559193#L3293 assume 1 != cleanup_~tmp___0~12#1; 559188#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 559183#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 559172#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 559164#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 559155#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 559154#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 559153#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 559150#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 559149#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 559148#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 559145#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 559146#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 559955#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 559947#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 559941#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 559936#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 559935#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 559928#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 559925#L2263-2 assume !(0 != ~persons_0~0); 559876#L2263-3 assume !(0 != ~persons_1~0); 559871#L2277-1 assume !(0 != ~persons_2~0); 559782#L2291-1 assume !(0 != ~persons_3~0); 559763#L2305-1 assume !(0 != ~persons_4~0); 559749#L2319-1 assume !(0 != ~persons_5~0); 559747#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 559741#L473-12 assume 0 == isPersonOnFloor_~floor#1; 559703#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 559689#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 559687#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 559685#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 559683#L473-14 assume 0 == isPersonOnFloor_~floor#1; 559644#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 559637#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 559634#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 559509#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 559508#L473-16 assume 0 == isPersonOnFloor_~floor#1; 559487#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 559465#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 559463#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 559461#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 559460#L473-18 assume 0 == isPersonOnFloor_~floor#1; 559432#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 559384#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 559380#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 559373#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 559371#L473-20 assume 0 == isPersonOnFloor_~floor#1; 559345#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 559314#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 559310#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 559308#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 559307#L473-22 assume 0 == isPersonOnFloor_~floor#1; 559265#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 559241#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 559238#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 559236#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 559235#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 559230#L429-41 assume { :end_inline_resetCallOnFloor } true; 559229#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 559227#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 559223#L1355-5 assume { :end_inline_resetFloorButton } true; 559222#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 559221#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 559220#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 559215#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 559213#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 559211#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 559202#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 559198#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 559197#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 559196#L3285-2 assume !false; 540941#L3286 [2022-12-13 21:47:41,977 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:41,977 INFO L85 PathProgramCache]: Analyzing trace with hash -761441419, now seen corresponding path program 1 times [2022-12-13 21:47:41,977 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:41,977 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [780862873] [2022-12-13 21:47:41,977 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:41,978 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:41,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:42,068 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:42,069 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:42,069 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [780862873] [2022-12-13 21:47:42,069 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [780862873] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:42,069 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:42,069 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 21:47:42,069 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [825169026] [2022-12-13 21:47:42,069 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:42,070 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:47:42,070 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:42,070 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 1 times [2022-12-13 21:47:42,070 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:42,070 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [253304842] [2022-12-13 21:47:42,070 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:42,071 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:42,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:42,150 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:42,150 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:42,151 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [253304842] [2022-12-13 21:47:42,151 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [253304842] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:42,151 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:42,151 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 21:47:42,151 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [79582945] [2022-12-13 21:47:42,151 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:42,151 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:47:42,152 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:47:42,152 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 21:47:42,152 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 21:47:42,152 INFO L87 Difference]: Start difference. First operand 41869 states and 77233 transitions. cyclomatic complexity: 35379 Second operand has 6 states, 6 states have (on average 8.833333333333334) internal successors, (53), 6 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:42,393 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:47:42,393 INFO L93 Difference]: Finished difference Result 41863 states and 77220 transitions. [2022-12-13 21:47:42,393 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41863 states and 77220 transitions. [2022-12-13 21:47:42,571 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:42,695 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41863 states to 41863 states and 77220 transitions. [2022-12-13 21:47:42,695 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28330 [2022-12-13 21:47:42,717 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28330 [2022-12-13 21:47:42,717 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41863 states and 77220 transitions. [2022-12-13 21:47:42,718 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:47:42,718 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41863 states and 77220 transitions. [2022-12-13 21:47:42,743 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41863 states and 77220 transitions. [2022-12-13 21:47:43,227 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41863 to 41863. [2022-12-13 21:47:43,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41863 states, 41863 states have (on average 1.8445882999307264) internal successors, (77220), 41862 states have internal predecessors, (77220), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:43,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41863 states to 41863 states and 77220 transitions. [2022-12-13 21:47:43,316 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41863 states and 77220 transitions. [2022-12-13 21:47:43,317 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-13 21:47:43,318 INFO L428 stractBuchiCegarLoop]: Abstraction has 41863 states and 77220 transitions. [2022-12-13 21:47:43,318 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-12-13 21:47:43,318 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41863 states and 77220 transitions. [2022-12-13 21:47:43,402 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:43,402 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:47:43,402 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:47:43,404 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:43,404 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:43,404 INFO L748 eck$LassoCheckResult]: Stem: 615669#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 615670#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 620759#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 620430#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 616951#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 616952#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 618708#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 618709#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 620115#L95 assume !(0 == getOrigin_~person#1); 616985#L99 assume !(1 == getOrigin_~person#1); 616986#L103 assume !(2 == getOrigin_~person#1); 621404#L107 assume !(3 == getOrigin_~person#1); 620651#L111 assume !(4 == getOrigin_~person#1); 619936#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 619937#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 620073#L653 assume !(0 == initPersonOnFloor_~floor#1); 619855#L680 assume 1 == initPersonOnFloor_~floor#1; 616563#L681 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 615725#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 616108#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 615532#L457-2 assume { :end_inline_callOnFloor } true; 617634#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 616359#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 616360#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 618230#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 619971#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 616977#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 616978#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 620905#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 621474#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 615314#L2261 assume !(0 != timeShift_~tmp___9~2#1); 615315#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 621125#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 617450#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 617451#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 617567#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 617568#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 619785#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 618881#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 618882#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 619622#L2021 assume !(1 == ~currentHeading~0); 616876#L2031 assume !(0 == ~currentFloorID~0); 616877#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 623734#L2037-1 assume { :end_inline_continueInDirection } true; 628545#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 628516#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 628511#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 628506#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 628508#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 628482#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 628485#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 628471#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 628468#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 628464#L3285-2 assume !false; 628465#L3286 [2022-12-13 21:47:43,404 INFO L750 eck$LassoCheckResult]: Loop: 628465#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 655107#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 655106#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 655105#L3293 assume 1 != cleanup_~tmp___0~12#1; 619813#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 618133#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 618134#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 620002#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 615534#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 615535#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 655073#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 655072#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 620777#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 620778#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 654849#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 654808#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 654810#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 619191#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 616022#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 617474#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 621246#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 654938#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 621172#L2263-2 assume !(0 != ~persons_0~0); 616103#L2263-3 assume !(0 != ~persons_1~0); 615898#L2277-1 assume !(0 != ~persons_2~0); 615781#L2291-1 assume !(0 != ~persons_3~0); 615453#L2305-1 assume !(0 != ~persons_4~0); 615666#L2319-1 assume !(0 != ~persons_5~0); 616868#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 616869#L473-12 assume 0 == isPersonOnFloor_~floor#1; 620184#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 615505#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 615280#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 615282#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 620199#L473-14 assume 0 == isPersonOnFloor_~floor#1; 621364#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 656430#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 656428#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 656426#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 656425#L473-16 assume 0 == isPersonOnFloor_~floor#1; 621079#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 615487#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 617260#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 617262#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 619059#L473-18 assume 0 == isPersonOnFloor_~floor#1; 619941#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 615187#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 616895#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 619633#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 655046#L473-20 assume 0 == isPersonOnFloor_~floor#1; 655035#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 655002#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 655000#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 654998#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 654996#L473-22 assume 0 == isPersonOnFloor_~floor#1; 654997#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 655430#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 655429#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 655428#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 616719#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 616720#L429-41 assume { :end_inline_resetCallOnFloor } true; 620246#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 620595#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 621439#L1355-5 assume { :end_inline_resetFloorButton } true; 621440#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 655417#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 617800#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 617345#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 618222#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 618223#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 621033#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 615374#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 619356#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 619357#L3285-2 assume !false; 628465#L3286 [2022-12-13 21:47:43,405 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:43,405 INFO L85 PathProgramCache]: Analyzing trace with hash -342341416, now seen corresponding path program 1 times [2022-12-13 21:47:43,405 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:43,405 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1260739694] [2022-12-13 21:47:43,405 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:43,405 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:43,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:43,474 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:43,474 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:43,474 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1260739694] [2022-12-13 21:47:43,475 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1260739694] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:43,475 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:43,475 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 21:47:43,475 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [732563093] [2022-12-13 21:47:43,475 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:43,475 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:47:43,475 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:43,476 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 2 times [2022-12-13 21:47:43,476 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:43,476 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [822876228] [2022-12-13 21:47:43,476 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:43,476 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:43,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:43,543 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:43,543 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:43,543 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [822876228] [2022-12-13 21:47:43,543 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [822876228] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:43,543 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:43,543 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 21:47:43,544 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2041884776] [2022-12-13 21:47:43,544 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:43,544 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:47:43,544 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:47:43,544 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 21:47:43,544 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 21:47:43,544 INFO L87 Difference]: Start difference. First operand 41863 states and 77220 transitions. cyclomatic complexity: 35372 Second operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:43,729 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:47:43,729 INFO L93 Difference]: Finished difference Result 41863 states and 77216 transitions. [2022-12-13 21:47:43,729 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41863 states and 77216 transitions. [2022-12-13 21:47:43,859 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:44,020 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41863 states to 41863 states and 77216 transitions. [2022-12-13 21:47:44,020 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28330 [2022-12-13 21:47:44,032 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28330 [2022-12-13 21:47:44,033 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41863 states and 77216 transitions. [2022-12-13 21:47:44,033 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:47:44,033 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41863 states and 77216 transitions. [2022-12-13 21:47:44,048 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41863 states and 77216 transitions. [2022-12-13 21:47:44,394 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41863 to 41863. [2022-12-13 21:47:44,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41863 states, 41863 states have (on average 1.8444927501612403) internal successors, (77216), 41862 states have internal predecessors, (77216), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:44,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41863 states to 41863 states and 77216 transitions. [2022-12-13 21:47:44,512 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41863 states and 77216 transitions. [2022-12-13 21:47:44,513 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-13 21:47:44,513 INFO L428 stractBuchiCegarLoop]: Abstraction has 41863 states and 77216 transitions. [2022-12-13 21:47:44,513 INFO L335 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-12-13 21:47:44,513 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41863 states and 77216 transitions. [2022-12-13 21:47:44,627 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:44,628 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:47:44,628 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:47:44,630 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:44,630 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:44,630 INFO L748 eck$LassoCheckResult]: Stem: 699408#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 699409#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 704553#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 704207#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 700706#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 700707#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 702457#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 702458#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 703878#L95 assume !(0 == getOrigin_~person#1); 700740#L99 assume !(1 == getOrigin_~person#1); 700741#L103 assume !(2 == getOrigin_~person#1); 705239#L107 assume !(3 == getOrigin_~person#1); 704433#L111 assume !(4 == getOrigin_~person#1); 703697#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 703698#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 703841#L653 assume !(0 == initPersonOnFloor_~floor#1); 703618#L680 assume 1 == initPersonOnFloor_~floor#1; 700304#L681 assume !(0 == initPersonOnFloor_~person#1); 700305#L684 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 699467#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 699845#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 699274#L457-2 assume { :end_inline_callOnFloor } true; 701381#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 700103#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 700104#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 701977#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 703734#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 700732#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 700733#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 704705#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 705311#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 705996#L2261 assume !(0 != timeShift_~tmp___9~2#1); 705995#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 705989#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 705766#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 705765#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 701317#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 701318#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 703540#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 702630#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 702631#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 703382#L2021 assume !(1 == ~currentHeading~0); 700627#L2031 assume !(0 == ~currentFloorID~0); 700628#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 701546#L2037-1 assume { :end_inline_continueInDirection } true; 701547#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 715520#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 715513#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 715504#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 715505#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 715485#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 715488#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 715477#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 715475#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 715473#L3285-2 assume !false; 701220#L3286 [2022-12-13 21:47:44,630 INFO L750 eck$LassoCheckResult]: Loop: 701220#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 701221#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 704542#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 702523#L3293 assume 1 != cleanup_~tmp___0~12#1; 702524#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 701885#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 701886#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 704161#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 699276#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 699277#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 701608#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 702906#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 702907#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 725497#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 725494#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 725491#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 725492#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 722351#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 722346#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 722342#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 722341#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 722339#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 722340#L2263-2 assume !(0 != ~persons_0~0); 739818#L2263-3 assume !(0 != ~persons_1~0); 739813#L2277-1 assume !(0 != ~persons_2~0); 739792#L2291-1 assume !(0 != ~persons_3~0); 739790#L2305-1 assume !(0 != ~persons_4~0); 739754#L2319-1 assume !(0 != ~persons_5~0); 739753#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 739752#L473-12 assume 0 == isPersonOnFloor_~floor#1; 739657#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 739643#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 739641#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 739639#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 739638#L473-14 assume 0 == isPersonOnFloor_~floor#1; 739529#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 739527#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 739525#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 739523#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 739522#L473-16 assume 0 == isPersonOnFloor_~floor#1; 739433#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 739411#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 739409#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 739401#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 739399#L473-18 assume 0 == isPersonOnFloor_~floor#1; 739368#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 739356#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 739354#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 739352#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 739350#L473-20 assume 0 == isPersonOnFloor_~floor#1; 738651#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 738613#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 738604#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 736418#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 736416#L473-22 assume 0 == isPersonOnFloor_~floor#1; 736417#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 738383#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 738381#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 738379#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 738378#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 738373#L429-41 assume { :end_inline_resetCallOnFloor } true; 704382#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 704383#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 738367#L1355-5 assume { :end_inline_resetFloorButton } true; 738366#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 738365#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 738364#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 704650#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 701969#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 701970#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 738349#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 737142#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 734852#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 703364#L3285-2 assume !false; 701220#L3286 [2022-12-13 21:47:44,631 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:44,631 INFO L85 PathProgramCache]: Analyzing trace with hash -1574810952, now seen corresponding path program 1 times [2022-12-13 21:47:44,631 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:44,631 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [966866297] [2022-12-13 21:47:44,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:44,631 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:44,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:44,714 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:44,714 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:44,714 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [966866297] [2022-12-13 21:47:44,714 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [966866297] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:44,714 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:44,714 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 21:47:44,715 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1870981662] [2022-12-13 21:47:44,715 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:44,715 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:47:44,715 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:44,716 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 3 times [2022-12-13 21:47:44,716 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:44,716 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1421727462] [2022-12-13 21:47:44,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:44,716 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:44,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:44,816 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:44,816 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:44,816 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1421727462] [2022-12-13 21:47:44,816 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1421727462] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:44,816 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:44,817 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 21:47:44,817 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1408084470] [2022-12-13 21:47:44,817 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:44,817 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:47:44,817 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:47:44,818 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 21:47:44,818 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 21:47:44,818 INFO L87 Difference]: Start difference. First operand 41863 states and 77216 transitions. cyclomatic complexity: 35368 Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:45,051 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:47:45,052 INFO L93 Difference]: Finished difference Result 41863 states and 77212 transitions. [2022-12-13 21:47:45,052 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41863 states and 77212 transitions. [2022-12-13 21:47:45,231 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:45,354 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41863 states to 41863 states and 77212 transitions. [2022-12-13 21:47:45,354 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28330 [2022-12-13 21:47:45,375 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28330 [2022-12-13 21:47:45,375 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41863 states and 77212 transitions. [2022-12-13 21:47:45,377 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:47:45,377 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41863 states and 77212 transitions. [2022-12-13 21:47:45,400 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41863 states and 77212 transitions. [2022-12-13 21:47:45,861 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41863 to 41863. [2022-12-13 21:47:45,882 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41863 states, 41863 states have (on average 1.8443972003917541) internal successors, (77212), 41862 states have internal predecessors, (77212), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:45,943 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41863 states to 41863 states and 77212 transitions. [2022-12-13 21:47:45,943 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41863 states and 77212 transitions. [2022-12-13 21:47:45,943 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-13 21:47:45,944 INFO L428 stractBuchiCegarLoop]: Abstraction has 41863 states and 77212 transitions. [2022-12-13 21:47:45,944 INFO L335 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-12-13 21:47:45,944 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41863 states and 77212 transitions. [2022-12-13 21:47:46,025 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:46,025 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:47:46,025 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:47:46,026 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:46,027 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:46,027 INFO L748 eck$LassoCheckResult]: Stem: 783147#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 783148#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 788232#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 787905#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 784438#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 784439#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 786183#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 786184#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 787584#L95 assume !(0 == getOrigin_~person#1); 784472#L99 assume !(1 == getOrigin_~person#1); 784473#L103 assume !(2 == getOrigin_~person#1); 788834#L107 assume !(3 == getOrigin_~person#1); 788120#L111 assume !(4 == getOrigin_~person#1); 787404#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 787405#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 787549#L653 assume !(0 == initPersonOnFloor_~floor#1); 787326#L680 assume 1 == initPersonOnFloor_~floor#1; 784041#L681 assume !(0 == initPersonOnFloor_~person#1); 784042#L684 assume !(1 == initPersonOnFloor_~person#1); 788349#L687 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 783377#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 783583#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 783014#L457-2 assume { :end_inline_callOnFloor } true; 785110#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 783842#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 783843#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 785701#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 787440#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 784464#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 784465#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 788369#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 788898#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 789483#L2261 assume !(0 != timeShift_~tmp___9~2#1); 789482#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 789481#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 789480#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 789478#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 785048#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 785049#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 787254#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 786352#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 786353#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 787092#L2021 assume !(1 == ~currentHeading~0); 784362#L2031 assume !(0 == ~currentFloorID~0); 784363#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 791190#L2037-1 assume { :end_inline_continueInDirection } true; 797200#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 797199#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 797196#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 797191#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 797190#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 791489#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 787063#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 782734#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 796964#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 796947#L3285-2 assume !false; 796948#L3286 [2022-12-13 21:47:46,027 INFO L750 eck$LassoCheckResult]: Loop: 796948#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 817717#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 817716#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 817715#L3293 assume 1 != cleanup_~tmp___0~12#1; 817714#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 817713#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 817712#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 817692#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 817682#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 817681#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 817680#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 817679#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 802920#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 817678#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 817676#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 817677#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 820140#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 820132#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 820126#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 820121#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 820120#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 820113#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 820110#L2263-2 assume !(0 != ~persons_0~0); 820062#L2263-3 assume !(0 != ~persons_1~0); 820057#L2277-1 assume !(0 != ~persons_2~0); 820036#L2291-1 assume !(0 != ~persons_3~0); 820034#L2305-1 assume !(0 != ~persons_4~0); 819998#L2319-1 assume !(0 != ~persons_5~0); 819997#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 819996#L473-12 assume 0 == isPersonOnFloor_~floor#1; 819894#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 819880#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 819878#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 819876#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 819875#L473-14 assume 0 == isPersonOnFloor_~floor#1; 819766#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 819764#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 819762#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 819760#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 819759#L473-16 assume 0 == isPersonOnFloor_~floor#1; 819670#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 819648#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 819646#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 819638#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 819636#L473-18 assume 0 == isPersonOnFloor_~floor#1; 819605#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 819593#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 819591#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 817868#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 817866#L473-20 assume 0 == isPersonOnFloor_~floor#1; 817850#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 817818#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 817816#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 817814#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 817813#L473-22 assume 0 == isPersonOnFloor_~floor#1; 817786#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 817767#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 817765#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 817763#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 817762#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 817757#L429-41 assume { :end_inline_resetCallOnFloor } true; 817756#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 817754#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 817750#L1355-5 assume { :end_inline_resetFloorButton } true; 817748#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 817747#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 817746#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 817741#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 817749#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 817738#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 817729#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 817725#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 817724#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 817723#L3285-2 assume !false; 796948#L3286 [2022-12-13 21:47:46,027 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:46,028 INFO L85 PathProgramCache]: Analyzing trace with hash 522167901, now seen corresponding path program 1 times [2022-12-13 21:47:46,028 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:46,028 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1101629632] [2022-12-13 21:47:46,028 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:46,028 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:46,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:46,075 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:46,075 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:46,075 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1101629632] [2022-12-13 21:47:46,075 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1101629632] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:46,075 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:46,075 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 21:47:46,075 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [448148601] [2022-12-13 21:47:46,075 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:46,076 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:47:46,076 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:46,076 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 4 times [2022-12-13 21:47:46,076 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:46,076 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [901775695] [2022-12-13 21:47:46,076 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:46,077 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:46,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:46,142 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:46,142 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:46,142 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [901775695] [2022-12-13 21:47:46,142 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [901775695] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:46,142 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:46,142 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 21:47:46,142 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [396493883] [2022-12-13 21:47:46,142 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:46,143 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:47:46,143 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:47:46,143 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 21:47:46,143 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 21:47:46,143 INFO L87 Difference]: Start difference. First operand 41863 states and 77212 transitions. cyclomatic complexity: 35364 Second operand has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:46,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:47:46,299 INFO L93 Difference]: Finished difference Result 41863 states and 77208 transitions. [2022-12-13 21:47:46,299 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41863 states and 77208 transitions. [2022-12-13 21:47:46,416 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:46,507 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41863 states to 41863 states and 77208 transitions. [2022-12-13 21:47:46,507 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28330 [2022-12-13 21:47:46,525 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28330 [2022-12-13 21:47:46,525 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41863 states and 77208 transitions. [2022-12-13 21:47:46,533 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:47:46,534 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41863 states and 77208 transitions. [2022-12-13 21:47:46,555 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41863 states and 77208 transitions. [2022-12-13 21:47:47,027 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41863 to 41863. [2022-12-13 21:47:47,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41863 states, 41863 states have (on average 1.8443016506222678) internal successors, (77208), 41862 states have internal predecessors, (77208), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:47,129 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41863 states to 41863 states and 77208 transitions. [2022-12-13 21:47:47,129 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41863 states and 77208 transitions. [2022-12-13 21:47:47,130 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-13 21:47:47,130 INFO L428 stractBuchiCegarLoop]: Abstraction has 41863 states and 77208 transitions. [2022-12-13 21:47:47,130 INFO L335 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-12-13 21:47:47,130 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41863 states and 77208 transitions. [2022-12-13 21:47:47,238 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:47,238 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:47:47,239 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:47:47,240 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:47,240 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:47,241 INFO L748 eck$LassoCheckResult]: Stem: 866893#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 866894#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 871957#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 871622#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 868181#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 868182#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 869926#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 869927#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 871315#L95 assume !(0 == getOrigin_~person#1); 868215#L99 assume !(1 == getOrigin_~person#1); 868216#L103 assume !(2 == getOrigin_~person#1); 872555#L107 assume !(3 == getOrigin_~person#1); 871841#L111 assume !(4 == getOrigin_~person#1); 871133#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 871134#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 871276#L653 assume !(0 == initPersonOnFloor_~floor#1); 871052#L680 assume !(1 == initPersonOnFloor_~floor#1); 870154#L707 assume !(2 == initPersonOnFloor_~floor#1); 869404#L734 assume !(3 == initPersonOnFloor_~floor#1); 867514#L761 assume !(4 == initPersonOnFloor_~floor#1); 867125#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 867333#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 866756#L457-2 assume { :end_inline_callOnFloor } true; 868858#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 867586#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 867587#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 869453#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 871168#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 868207#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 868208#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 872091#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 867126#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 867127#L2261 assume !(0 != timeShift_~tmp___9~2#1); 873452#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 873450#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 873449#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 873077#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 873067#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 872954#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 872950#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 872948#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 872946#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 871454#L2021 assume !(1 == ~currentHeading~0); 871456#L2031 assume !(0 == ~currentFloorID~0); 869985#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 869986#L2037-1 assume { :end_inline_continueInDirection } true; 876510#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 876362#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 876334#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 876314#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 876316#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 876278#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 876281#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 876257#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 876254#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 876250#L3285-2 assume !false; 876251#L3286 [2022-12-13 21:47:47,241 INFO L750 eck$LassoCheckResult]: Loop: 876251#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 903912#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 903911#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 903910#L3293 assume 1 != cleanup_~tmp___0~12#1; 903909#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 903904#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 903902#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 903881#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 903858#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 903856#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 903854#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 903852#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 884309#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 903849#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 903847#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 872644#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 869342#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 869343#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 867245#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 868700#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 870626#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 870627#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 871557#L2263-2 assume !(0 != ~persons_0~0); 904657#L2263-3 assume !(0 != ~persons_1~0); 904652#L2277-1 assume !(0 != ~persons_2~0); 904631#L2291-1 assume !(0 != ~persons_3~0); 904629#L2305-1 assume !(0 != ~persons_4~0); 904593#L2319-1 assume !(0 != ~persons_5~0); 904592#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 904591#L473-12 assume 0 == isPersonOnFloor_~floor#1; 904497#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 904483#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 904481#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 904479#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 904478#L473-14 assume 0 == isPersonOnFloor_~floor#1; 904372#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 904370#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 904368#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 904366#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 904365#L473-16 assume 0 == isPersonOnFloor_~floor#1; 904344#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 904322#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 904320#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 904312#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 904310#L473-18 assume 0 == isPersonOnFloor_~floor#1; 904279#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 904267#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 904265#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 904263#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 904261#L473-20 assume 0 == isPersonOnFloor_~floor#1; 904186#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 904154#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 904152#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 904150#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 904149#L473-22 assume 0 == isPersonOnFloor_~floor#1; 903976#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 903957#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 903955#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 903953#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 903952#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 903947#L429-41 assume { :end_inline_resetCallOnFloor } true; 903946#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 903944#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 903940#L1355-5 assume { :end_inline_resetFloorButton } true; 903938#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 903937#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 903936#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 903931#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 903939#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 903928#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 903919#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 903915#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 903914#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 903913#L3285-2 assume !false; 876251#L3286 [2022-12-13 21:47:47,241 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:47,241 INFO L85 PathProgramCache]: Analyzing trace with hash -1949605155, now seen corresponding path program 1 times [2022-12-13 21:47:47,242 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:47,242 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [256790313] [2022-12-13 21:47:47,242 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:47,242 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:47,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:47,301 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:47,301 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:47,301 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [256790313] [2022-12-13 21:47:47,301 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [256790313] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:47,301 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:47,302 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 21:47:47,302 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [205186647] [2022-12-13 21:47:47,302 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:47,302 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:47:47,302 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:47,303 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 5 times [2022-12-13 21:47:47,303 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:47,303 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [357442361] [2022-12-13 21:47:47,303 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:47,303 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:47,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:47,400 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:47,400 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:47,400 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [357442361] [2022-12-13 21:47:47,400 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [357442361] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:47,400 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:47,400 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 21:47:47,401 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1039503777] [2022-12-13 21:47:47,401 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:47,401 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:47:47,401 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:47:47,401 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 21:47:47,402 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 21:47:47,402 INFO L87 Difference]: Start difference. First operand 41863 states and 77208 transitions. cyclomatic complexity: 35360 Second operand has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:47,589 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:47:47,589 INFO L93 Difference]: Finished difference Result 41842 states and 77174 transitions. [2022-12-13 21:47:47,589 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41842 states and 77174 transitions. [2022-12-13 21:47:47,759 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:47,878 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41842 states to 41842 states and 77174 transitions. [2022-12-13 21:47:47,878 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28309 [2022-12-13 21:47:47,900 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28309 [2022-12-13 21:47:47,900 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41842 states and 77174 transitions. [2022-12-13 21:47:47,901 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:47:47,901 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77174 transitions. [2022-12-13 21:47:47,923 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41842 states and 77174 transitions. [2022-12-13 21:47:48,267 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41842 to 41842. [2022-12-13 21:47:48,295 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41842 states, 41842 states have (on average 1.8444147029300704) internal successors, (77174), 41841 states have internal predecessors, (77174), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:48,438 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41842 states to 41842 states and 77174 transitions. [2022-12-13 21:47:48,438 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77174 transitions. [2022-12-13 21:47:48,439 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-13 21:47:48,439 INFO L428 stractBuchiCegarLoop]: Abstraction has 41842 states and 77174 transitions. [2022-12-13 21:47:48,439 INFO L335 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-12-13 21:47:48,440 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41842 states and 77174 transitions. [2022-12-13 21:47:48,509 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:48,509 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:47:48,509 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:47:48,511 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:48,511 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:48,511 INFO L748 eck$LassoCheckResult]: Stem: 950612#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 950613#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 955700#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 955366#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 951898#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 951899#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 953653#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 953654#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 955053#L95 assume !(0 == getOrigin_~person#1); 951933#L99 assume !(1 == getOrigin_~person#1); 951934#L103 assume !(2 == getOrigin_~person#1); 956325#L107 assume !(3 == getOrigin_~person#1); 955586#L111 assume !(4 == getOrigin_~person#1); 954875#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 954876#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 955016#L653 assume !(0 == initPersonOnFloor_~floor#1); 954799#L680 assume 1 == initPersonOnFloor_~floor#1; 951507#L681 assume !(0 == initPersonOnFloor_~person#1); 951508#L684 assume !(1 == initPersonOnFloor_~person#1); 955823#L687 assume !(2 == initPersonOnFloor_~person#1); 954697#L690 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 954252#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 951047#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 950475#L457-2 assume { :end_inline_callOnFloor } true; 952585#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 951300#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 951301#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 953172#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 956204#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 951924#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 951926#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 955841#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 956978#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 956970#L2261 assume !(0 != timeShift_~tmp___9~2#1); 956967#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 956965#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 952399#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 952400#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 952518#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 952519#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 954726#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 953824#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 953825#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 954564#L2021 assume !(1 == ~currentHeading~0); 951820#L2031 assume !(0 == ~currentFloorID~0); 951821#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 958948#L2037-1 assume { :end_inline_continueInDirection } true; 960727#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 960726#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 960725#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 960715#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 960745#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 960575#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 960578#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 960555#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 960553#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 960549#L3285-2 assume !false; 960550#L3286 [2022-12-13 21:47:48,512 INFO L750 eck$LassoCheckResult]: Loop: 960550#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 981003#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 981002#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 981001#L3293 assume 1 != cleanup_~tmp___0~12#1; 981000#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 980995#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 980993#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 980977#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 980968#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 980966#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 980964#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 980962#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 968363#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 980956#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 980954#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 980951#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 980949#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 980940#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 980937#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 980313#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 980312#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 980310#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 980311#L2263-2 assume !(0 != ~persons_0~0); 981483#L2263-3 assume !(0 != ~persons_1~0); 981478#L2277-1 assume !(0 != ~persons_2~0); 981442#L2291-1 assume !(0 != ~persons_3~0); 981440#L2305-1 assume !(0 != ~persons_4~0); 981394#L2319-1 assume !(0 != ~persons_5~0); 981393#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 981392#L473-12 assume 0 == isPersonOnFloor_~floor#1; 981370#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 981357#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 981355#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 981352#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 981351#L473-14 assume 0 == isPersonOnFloor_~floor#1; 981309#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 981307#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 981305#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 981303#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 981302#L473-16 assume 0 == isPersonOnFloor_~floor#1; 981281#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 981259#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 981257#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 981255#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 981254#L473-18 assume 0 == isPersonOnFloor_~floor#1; 981224#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 981212#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 981210#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 981208#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 981206#L473-20 assume 0 == isPersonOnFloor_~floor#1; 981192#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 981160#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 981158#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 981156#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 981155#L473-22 assume 0 == isPersonOnFloor_~floor#1; 981072#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 981053#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 981051#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 981049#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 981048#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 981043#L429-41 assume { :end_inline_resetCallOnFloor } true; 981042#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 981040#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 981036#L1355-5 assume { :end_inline_resetFloorButton } true; 981034#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 981033#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 981032#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 981027#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 981035#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 981024#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 981015#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 981007#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 981005#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 981004#L3285-2 assume !false; 960550#L3286 [2022-12-13 21:47:48,512 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:48,512 INFO L85 PathProgramCache]: Analyzing trace with hash -1542135587, now seen corresponding path program 1 times [2022-12-13 21:47:48,512 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:48,512 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [116736397] [2022-12-13 21:47:48,512 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:48,513 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:48,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:48,570 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:48,570 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:48,570 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [116736397] [2022-12-13 21:47:48,570 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [116736397] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:48,570 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:48,570 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 21:47:48,571 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [403029072] [2022-12-13 21:47:48,571 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:48,571 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:47:48,571 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:48,571 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 6 times [2022-12-13 21:47:48,571 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:48,572 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [692491827] [2022-12-13 21:47:48,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:48,572 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:48,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:48,639 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:48,639 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:48,639 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [692491827] [2022-12-13 21:47:48,639 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [692491827] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:48,639 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:48,639 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 21:47:48,640 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1692290410] [2022-12-13 21:47:48,640 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:48,640 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:47:48,640 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:47:48,640 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 21:47:48,640 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 21:47:48,640 INFO L87 Difference]: Start difference. First operand 41842 states and 77174 transitions. cyclomatic complexity: 35347 Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:48,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:47:48,791 INFO L93 Difference]: Finished difference Result 41842 states and 77173 transitions. [2022-12-13 21:47:48,791 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41842 states and 77173 transitions. [2022-12-13 21:47:48,916 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:49,010 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41842 states to 41842 states and 77173 transitions. [2022-12-13 21:47:49,011 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28309 [2022-12-13 21:47:49,028 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28309 [2022-12-13 21:47:49,029 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41842 states and 77173 transitions. [2022-12-13 21:47:49,030 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:47:49,030 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77173 transitions. [2022-12-13 21:47:49,049 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41842 states and 77173 transitions. [2022-12-13 21:47:49,387 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41842 to 41842. [2022-12-13 21:47:49,415 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41842 states, 41842 states have (on average 1.8443908034988767) internal successors, (77173), 41841 states have internal predecessors, (77173), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:49,476 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41842 states to 41842 states and 77173 transitions. [2022-12-13 21:47:49,476 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77173 transitions. [2022-12-13 21:47:49,476 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-13 21:47:49,477 INFO L428 stractBuchiCegarLoop]: Abstraction has 41842 states and 77173 transitions. [2022-12-13 21:47:49,477 INFO L335 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-12-13 21:47:49,477 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41842 states and 77173 transitions. [2022-12-13 21:47:49,560 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:49,560 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:47:49,560 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:47:49,562 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:49,562 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:49,562 INFO L748 eck$LassoCheckResult]: Stem: 1034308#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1034309#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1039527#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1039177#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1035598#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1035599#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1037359#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1037360#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1038824#L95 assume !(0 == getOrigin_~person#1); 1035633#L99 assume !(1 == getOrigin_~person#1); 1035634#L103 assume !(2 == getOrigin_~person#1); 1040259#L107 assume !(3 == getOrigin_~person#1); 1039406#L111 assume !(4 == getOrigin_~person#1); 1038633#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1038634#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1038789#L653 assume !(0 == initPersonOnFloor_~floor#1); 1038555#L680 assume 1 == initPersonOnFloor_~floor#1; 1035192#L681 assume !(0 == initPersonOnFloor_~person#1); 1035193#L684 assume !(1 == initPersonOnFloor_~person#1); 1039663#L687 assume !(2 == initPersonOnFloor_~person#1); 1038436#L690 assume !(3 == initPersonOnFloor_~person#1); 1038437#L693 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 1037976#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1034737#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1034175#L457-2 assume { :end_inline_callOnFloor } true; 1036274#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1034992#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1034993#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1036876#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1038673#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1040642#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1040633#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1040345#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1034535#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1033957#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1033958#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1039950#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1040099#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1041013#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1036211#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1036212#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1038470#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1037526#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1037527#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1038304#L2021 assume !(1 == ~currentHeading~0); 1035517#L2031 assume !(0 == ~currentFloorID~0); 1035518#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1036440#L2037-1 assume { :end_inline_continueInDirection } true; 1036441#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1036341#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1036342#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1047521#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1047520#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1047490#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1047493#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1047482#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1047480#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1047477#L3285-2 assume !false; 1047478#L3286 [2022-12-13 21:47:49,562 INFO L750 eck$LassoCheckResult]: Loop: 1047478#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1062297#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1062296#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1062295#L3293 assume 1 != cleanup_~tmp___0~12#1; 1062294#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1062293#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1062292#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1062281#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1061749#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1061319#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1061318#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1054279#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1054277#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1054274#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1054270#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1054271#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1061281#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1061275#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1061267#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1056872#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1056866#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1056863#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1056864#L2263-2 assume !(0 != ~persons_0~0); 1063991#L2263-3 assume !(0 != ~persons_1~0); 1063981#L2277-1 assume !(0 != ~persons_2~0); 1063911#L2291-1 assume !(0 != ~persons_3~0); 1063887#L2305-1 assume !(0 != ~persons_4~0); 1063878#L2319-1 assume !(0 != ~persons_5~0); 1063872#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1063870#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1063832#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1063818#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1063816#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1063814#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1063812#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1063774#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1063767#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1063764#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1063762#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1062904#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1062581#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1062559#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1062557#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1062555#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1062554#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1062523#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1062511#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1062509#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1062507#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1062505#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1062428#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1062396#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1062394#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1062392#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1062391#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1062366#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1062347#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1062345#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1062343#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1062342#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1062337#L429-41 assume { :end_inline_resetCallOnFloor } true; 1062336#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1062334#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1062330#L1355-5 assume { :end_inline_resetFloorButton } true; 1062328#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1062327#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1062326#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1062321#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1062329#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1062318#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1062309#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1062305#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1062304#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1062303#L3285-2 assume !false; 1047478#L3286 [2022-12-13 21:47:49,562 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:49,563 INFO L85 PathProgramCache]: Analyzing trace with hash 537794530, now seen corresponding path program 1 times [2022-12-13 21:47:49,563 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:49,563 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1924688976] [2022-12-13 21:47:49,563 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:49,563 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:49,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:49,610 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:49,610 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:49,610 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1924688976] [2022-12-13 21:47:49,610 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1924688976] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:49,610 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:49,611 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 21:47:49,611 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1308938263] [2022-12-13 21:47:49,611 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:49,611 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:47:49,611 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:49,611 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 7 times [2022-12-13 21:47:49,611 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:49,612 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1263734715] [2022-12-13 21:47:49,612 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:49,612 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:49,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:49,676 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:49,676 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:49,676 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1263734715] [2022-12-13 21:47:49,676 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1263734715] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:49,676 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:49,676 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 21:47:49,677 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [891225796] [2022-12-13 21:47:49,677 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:49,677 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:47:49,677 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:47:49,677 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 21:47:49,677 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 21:47:49,678 INFO L87 Difference]: Start difference. First operand 41842 states and 77173 transitions. cyclomatic complexity: 35346 Second operand has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:49,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:47:49,853 INFO L93 Difference]: Finished difference Result 41842 states and 77172 transitions. [2022-12-13 21:47:49,853 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41842 states and 77172 transitions. [2022-12-13 21:47:49,979 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:50,199 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41842 states to 41842 states and 77172 transitions. [2022-12-13 21:47:50,199 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28309 [2022-12-13 21:47:50,218 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28309 [2022-12-13 21:47:50,218 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41842 states and 77172 transitions. [2022-12-13 21:47:50,221 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:47:50,221 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77172 transitions. [2022-12-13 21:47:50,240 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41842 states and 77172 transitions. [2022-12-13 21:47:50,613 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41842 to 41842. [2022-12-13 21:47:50,643 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41842 states, 41842 states have (on average 1.844366904067683) internal successors, (77172), 41841 states have internal predecessors, (77172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:50,730 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41842 states to 41842 states and 77172 transitions. [2022-12-13 21:47:50,730 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77172 transitions. [2022-12-13 21:47:50,731 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-13 21:47:50,732 INFO L428 stractBuchiCegarLoop]: Abstraction has 41842 states and 77172 transitions. [2022-12-13 21:47:50,732 INFO L335 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-12-13 21:47:50,732 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41842 states and 77172 transitions. [2022-12-13 21:47:50,844 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:50,845 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:47:50,845 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:47:50,846 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:50,846 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:50,847 INFO L748 eck$LassoCheckResult]: Stem: 1118011#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1118012#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1123112#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1122789#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1119286#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1119287#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1121026#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1121027#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1122465#L95 assume !(0 == getOrigin_~person#1); 1119321#L99 assume !(1 == getOrigin_~person#1); 1119322#L103 assume !(2 == getOrigin_~person#1); 1123824#L107 assume !(3 == getOrigin_~person#1); 1123002#L111 assume !(4 == getOrigin_~person#1); 1122279#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1122280#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1122429#L653 assume !(0 == initPersonOnFloor_~floor#1); 1122200#L680 assume 1 == initPersonOnFloor_~floor#1; 1118890#L681 assume !(0 == initPersonOnFloor_~person#1); 1118891#L684 assume !(1 == initPersonOnFloor_~person#1); 1123233#L687 assume !(2 == initPersonOnFloor_~person#1); 1122097#L690 assume !(3 == initPersonOnFloor_~person#1); 1122098#L693 assume !(4 == initPersonOnFloor_~person#1); 1121632#L696 assume !(5 == initPersonOnFloor_~person#1); 1121633#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1118444#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1117873#L457-2 assume { :end_inline_callOnFloor } true; 1119959#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1118693#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1118694#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1120547#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1122315#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1119312#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1119314#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1123255#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1118240#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1117655#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1117656#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1123516#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1119773#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1119774#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1119895#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1119896#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1122125#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1121193#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1121194#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1121957#L2021 assume !(1 == ~currentHeading~0); 1119211#L2031 assume !(0 == ~currentFloorID~0); 1119212#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1126437#L2037-1 assume { :end_inline_continueInDirection } true; 1128926#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1128925#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1128875#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1128869#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1128868#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1126475#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1121929#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1117593#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1122135#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1123856#L3285-2 assume !false; 1135513#L3286 [2022-12-13 21:47:50,847 INFO L750 eck$LassoCheckResult]: Loop: 1135513#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1155907#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1155906#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1155905#L3293 assume 1 != cleanup_~tmp___0~12#1; 1155904#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1155899#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1155897#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1155881#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1155872#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1155871#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1155870#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1155869#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1135723#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1155868#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1155866#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1155864#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1155865#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1155848#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1155845#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1149904#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1149902#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1149898#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1149899#L2263-2 assume !(0 != ~persons_0~0); 1157826#L2263-3 assume !(0 != ~persons_1~0); 1157821#L2277-1 assume !(0 != ~persons_2~0); 1157800#L2291-1 assume !(0 != ~persons_3~0); 1157798#L2305-1 assume !(0 != ~persons_4~0); 1157762#L2319-1 assume !(0 != ~persons_5~0); 1157761#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1157760#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1157583#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1157569#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1157567#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1157565#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1157564#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1157455#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1157453#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1157451#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1157449#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1157448#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1157359#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1157337#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1157335#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1157327#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1157325#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1157294#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1157282#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1157280#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1157278#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1157276#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1157201#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1157169#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1157167#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1157165#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1157164#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1157072#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1157053#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1157051#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1157049#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1157048#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1157043#L429-41 assume { :end_inline_resetCallOnFloor } true; 1157042#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1157040#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1157036#L1355-5 assume { :end_inline_resetFloorButton } true; 1157035#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1157034#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1157033#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1157026#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1157025#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1155928#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1155919#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1155911#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1155909#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1155908#L3285-2 assume !false; 1135513#L3286 [2022-12-13 21:47:50,847 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:50,847 INFO L85 PathProgramCache]: Analyzing trace with hash -1395488252, now seen corresponding path program 1 times [2022-12-13 21:47:50,848 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:50,848 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1110925746] [2022-12-13 21:47:50,848 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:50,848 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:50,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:50,886 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:50,886 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:50,886 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1110925746] [2022-12-13 21:47:50,886 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1110925746] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:50,886 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:50,886 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 21:47:50,887 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [983755819] [2022-12-13 21:47:50,887 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:50,887 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:47:50,887 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:50,887 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 8 times [2022-12-13 21:47:50,887 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:50,888 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1173596934] [2022-12-13 21:47:50,888 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:50,888 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:50,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:50,961 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:50,961 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:50,961 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1173596934] [2022-12-13 21:47:50,961 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1173596934] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:50,961 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:50,961 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 21:47:50,961 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [667373060] [2022-12-13 21:47:50,962 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:50,962 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:47:50,962 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:47:50,962 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 21:47:50,962 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 21:47:50,963 INFO L87 Difference]: Start difference. First operand 41842 states and 77172 transitions. cyclomatic complexity: 35345 Second operand has 3 states, 3 states have (on average 19.666666666666668) internal successors, (59), 3 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:51,129 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:47:51,129 INFO L93 Difference]: Finished difference Result 41842 states and 77171 transitions. [2022-12-13 21:47:51,129 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41842 states and 77171 transitions. [2022-12-13 21:47:51,352 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:51,433 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41842 states to 41842 states and 77171 transitions. [2022-12-13 21:47:51,433 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28309 [2022-12-13 21:47:51,448 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28309 [2022-12-13 21:47:51,449 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41842 states and 77171 transitions. [2022-12-13 21:47:51,460 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:47:51,460 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77171 transitions. [2022-12-13 21:47:51,476 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41842 states and 77171 transitions. [2022-12-13 21:47:51,754 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41842 to 41842. [2022-12-13 21:47:51,782 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41842 states, 41842 states have (on average 1.8443430046364897) internal successors, (77171), 41841 states have internal predecessors, (77171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:51,843 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41842 states to 41842 states and 77171 transitions. [2022-12-13 21:47:51,843 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77171 transitions. [2022-12-13 21:47:51,843 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 21:47:51,844 INFO L428 stractBuchiCegarLoop]: Abstraction has 41842 states and 77171 transitions. [2022-12-13 21:47:51,844 INFO L335 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-12-13 21:47:51,844 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41842 states and 77171 transitions. [2022-12-13 21:47:51,927 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:51,927 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:47:51,927 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:47:51,928 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:51,928 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:51,929 INFO L748 eck$LassoCheckResult]: Stem: 1201705#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1201706#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1206802#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1206479#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1202983#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1202984#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1204731#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1204732#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1206147#L95 assume !(0 == getOrigin_~person#1); 1203018#L99 assume !(1 == getOrigin_~person#1); 1203019#L103 assume !(2 == getOrigin_~person#1); 1207436#L107 assume !(3 == getOrigin_~person#1); 1206690#L111 assume !(4 == getOrigin_~person#1); 1205961#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1205962#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1206107#L653 assume !(0 == initPersonOnFloor_~floor#1); 1205881#L680 assume 1 == initPersonOnFloor_~floor#1; 1202591#L681 assume !(0 == initPersonOnFloor_~person#1); 1202592#L684 assume !(1 == initPersonOnFloor_~person#1); 1206922#L687 assume !(2 == initPersonOnFloor_~person#1); 1205787#L690 assume !(3 == initPersonOnFloor_~person#1); 1205788#L693 assume !(4 == initPersonOnFloor_~person#1); 1205343#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1205344#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1202135#L445 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1201569#L457-2 assume { :end_inline_callOnFloor } true; 1203662#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1202387#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1202388#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1204256#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1207305#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1203009#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1203011#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1206942#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1208282#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1208281#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1208280#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1208279#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1203479#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1203480#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1203593#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1203594#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1205815#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1204900#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1204901#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1205657#L2021 assume !(1 == ~currentHeading~0); 1206288#L2031 assume !(0 == ~currentFloorID~0); 1204793#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1203827#L2037-1 assume { :end_inline_continueInDirection } true; 1203828#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1217034#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1217031#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1217025#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1217030#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1216888#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1216891#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1216881#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1216876#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1216822#L3285-2 assume !false; 1216823#L3286 [2022-12-13 21:47:51,929 INFO L750 eck$LassoCheckResult]: Loop: 1216823#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1224980#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1224979#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1224978#L3293 assume 1 != cleanup_~tmp___0~12#1; 1224977#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1224972#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1224970#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1224954#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1224945#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1224944#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1224941#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1224938#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1223651#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1224937#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1224930#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1224927#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1224926#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1224918#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1224912#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1224907#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1224906#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1224904#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1224905#L2263-2 assume !(0 != ~persons_0~0); 1232099#L2263-3 assume !(0 != ~persons_1~0); 1232094#L2277-1 assume !(0 != ~persons_2~0); 1232073#L2291-1 assume !(0 != ~persons_3~0); 1232071#L2305-1 assume !(0 != ~persons_4~0); 1232035#L2319-1 assume !(0 != ~persons_5~0); 1232034#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1232033#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1231938#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1231924#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1231922#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1231920#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1231919#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1231336#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1231334#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1231332#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1231330#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1231328#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1231230#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1231209#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1231203#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1231200#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1231196#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1231164#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1231152#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1231150#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1231148#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1231147#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1225174#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1225142#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1225140#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1225134#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1225133#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1225049#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1225030#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1225028#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1225026#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1225025#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1225020#L429-41 assume { :end_inline_resetCallOnFloor } true; 1225019#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1225017#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1225013#L1355-5 assume { :end_inline_resetFloorButton } true; 1225011#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1225010#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1225009#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1225004#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1225012#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1225001#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1224992#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1224984#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1224982#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1224981#L3285-2 assume !false; 1216823#L3286 [2022-12-13 21:47:51,929 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:51,929 INFO L85 PathProgramCache]: Analyzing trace with hash -2055019774, now seen corresponding path program 1 times [2022-12-13 21:47:51,929 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:51,929 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [978550677] [2022-12-13 21:47:51,929 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:51,929 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:51,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:51,996 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:51,996 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:51,996 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [978550677] [2022-12-13 21:47:51,996 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [978550677] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:51,996 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:51,996 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 21:47:51,996 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [5864541] [2022-12-13 21:47:51,996 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:51,997 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:47:51,997 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:51,997 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 9 times [2022-12-13 21:47:51,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:51,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2129401952] [2022-12-13 21:47:51,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:51,997 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:52,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:52,057 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:52,057 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:52,057 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2129401952] [2022-12-13 21:47:52,057 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2129401952] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:52,057 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:52,057 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 21:47:52,057 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1551665238] [2022-12-13 21:47:52,057 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:52,058 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:47:52,058 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:47:52,058 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 21:47:52,058 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-13 21:47:52,058 INFO L87 Difference]: Start difference. First operand 41842 states and 77171 transitions. cyclomatic complexity: 35344 Second operand has 7 states, 7 states have (on average 8.428571428571429) internal successors, (59), 7 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:52,355 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:47:52,355 INFO L93 Difference]: Finished difference Result 41842 states and 77170 transitions. [2022-12-13 21:47:52,355 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41842 states and 77170 transitions. [2022-12-13 21:47:52,474 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:52,562 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41842 states to 41842 states and 77170 transitions. [2022-12-13 21:47:52,562 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28309 [2022-12-13 21:47:52,579 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28309 [2022-12-13 21:47:52,579 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41842 states and 77170 transitions. [2022-12-13 21:47:52,580 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:47:52,580 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77170 transitions. [2022-12-13 21:47:52,599 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41842 states and 77170 transitions. [2022-12-13 21:47:52,870 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41842 to 41842. [2022-12-13 21:47:52,898 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41842 states, 41842 states have (on average 1.844319105205296) internal successors, (77170), 41841 states have internal predecessors, (77170), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:52,958 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41842 states to 41842 states and 77170 transitions. [2022-12-13 21:47:52,958 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41842 states and 77170 transitions. [2022-12-13 21:47:52,959 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 21:47:52,960 INFO L428 stractBuchiCegarLoop]: Abstraction has 41842 states and 77170 transitions. [2022-12-13 21:47:52,960 INFO L335 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2022-12-13 21:47:52,960 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41842 states and 77170 transitions. [2022-12-13 21:47:53,060 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19426 [2022-12-13 21:47:53,060 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:47:53,060 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:47:53,062 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:53,062 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:53,063 INFO L748 eck$LassoCheckResult]: Stem: 1285417#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1285418#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1290475#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1290167#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1286694#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1286695#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1288423#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1288424#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1289837#L95 assume !(0 == getOrigin_~person#1); 1286729#L99 assume !(1 == getOrigin_~person#1); 1286730#L103 assume !(2 == getOrigin_~person#1); 1291114#L107 assume !(3 == getOrigin_~person#1); 1290371#L111 assume !(4 == getOrigin_~person#1); 1289650#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1289651#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1289798#L653 assume !(0 == initPersonOnFloor_~floor#1); 1289572#L680 assume 1 == initPersonOnFloor_~floor#1; 1286303#L681 assume !(0 == initPersonOnFloor_~person#1); 1286304#L684 assume !(1 == initPersonOnFloor_~person#1); 1290589#L687 assume !(2 == initPersonOnFloor_~person#1); 1289467#L690 assume !(3 == initPersonOnFloor_~person#1); 1289468#L693 assume !(4 == initPersonOnFloor_~person#1); 1289020#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1289021#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1285846#L445 assume !(0 == callOnFloor_~floorID#1); 1285847#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1285278#L457-2 assume { :end_inline_callOnFloor } true; 1287367#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1286099#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1286100#L382 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1287948#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1289687#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1291435#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1291426#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1291178#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1291179#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1291799#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1291798#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1291797#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1287189#L382-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1287190#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1287303#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1287304#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1289493#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1288589#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1288590#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1289336#L2021 assume !(1 == ~currentHeading~0); 1289975#L2031 assume !(0 == ~currentFloorID~0); 1288482#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1288483#L2037-1 assume { :end_inline_continueInDirection } true; 1294094#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1294088#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1294085#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1294078#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1294079#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1294047#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1294050#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1294039#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1294037#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1294035#L3285-2 assume !false; 1294036#L3286 [2022-12-13 21:47:53,063 INFO L750 eck$LassoCheckResult]: Loop: 1294036#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1319633#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1319632#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1319045#L3293 assume 1 != cleanup_~tmp___0~12#1; 1319040#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1319038#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1319037#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1318818#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1318809#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1318808#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1318802#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1318800#L382-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1303130#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1318799#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1318797#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1318798#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1318834#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1318780#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1318776#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1318764#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1318761#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1318759#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1318760#L2263-2 assume !(0 != ~persons_0~0); 1321135#L2263-3 assume !(0 != ~persons_1~0); 1321130#L2277-1 assume !(0 != ~persons_2~0); 1321109#L2291-1 assume !(0 != ~persons_3~0); 1321107#L2305-1 assume !(0 != ~persons_4~0); 1321085#L2319-1 assume !(0 != ~persons_5~0); 1321084#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1321083#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1321047#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1321033#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1321031#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1321029#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1321028#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1320993#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1320992#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1320988#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1320986#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1320985#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1320910#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1320878#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1320874#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1320867#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1320863#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1320818#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1320807#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1320766#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1320763#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1320757#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1320743#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1320711#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1320709#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1320707#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1320706#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1320663#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1320639#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1320636#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1320634#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1320633#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1320628#L429-41 assume { :end_inline_resetCallOnFloor } true; 1320627#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1320625#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1320621#L1355-5 assume { :end_inline_resetFloorButton } true; 1320620#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1320619#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1320618#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1320608#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1320607#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1320606#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1320597#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1320593#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1320561#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1320559#L3285-2 assume !false; 1294036#L3286 [2022-12-13 21:47:53,063 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:53,064 INFO L85 PathProgramCache]: Analyzing trace with hash 668868151, now seen corresponding path program 1 times [2022-12-13 21:47:53,064 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:53,064 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2111243355] [2022-12-13 21:47:53,064 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:53,064 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:53,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:53,120 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:53,120 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:53,120 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2111243355] [2022-12-13 21:47:53,120 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2111243355] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:53,120 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:53,120 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 21:47:53,120 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1771352755] [2022-12-13 21:47:53,120 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:53,120 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:47:53,121 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:53,121 INFO L85 PathProgramCache]: Analyzing trace with hash 1788915814, now seen corresponding path program 10 times [2022-12-13 21:47:53,121 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:53,121 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1886784795] [2022-12-13 21:47:53,121 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:53,121 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:53,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:53,170 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:53,170 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:53,170 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1886784795] [2022-12-13 21:47:53,170 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1886784795] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:53,170 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:53,170 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 21:47:53,170 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1746555372] [2022-12-13 21:47:53,170 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:53,170 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:47:53,170 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:47:53,171 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 21:47:53,171 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 21:47:53,171 INFO L87 Difference]: Start difference. First operand 41842 states and 77170 transitions. cyclomatic complexity: 35343 Second operand has 4 states, 4 states have (on average 15.0) internal successors, (60), 3 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:54,217 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:47:54,217 INFO L93 Difference]: Finished difference Result 25352 states and 46016 transitions. [2022-12-13 21:47:54,217 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25352 states and 46016 transitions. [2022-12-13 21:47:54,292 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 11298 [2022-12-13 21:47:54,345 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25352 states to 25352 states and 46016 transitions. [2022-12-13 21:47:54,345 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17799 [2022-12-13 21:47:54,355 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17799 [2022-12-13 21:47:54,355 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25352 states and 46016 transitions. [2022-12-13 21:47:54,356 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:47:54,356 INFO L218 hiAutomatonCegarLoop]: Abstraction has 25352 states and 46016 transitions. [2022-12-13 21:47:54,372 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25352 states and 46016 transitions. [2022-12-13 21:47:54,510 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25352 to 14709. [2022-12-13 21:47:54,520 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14709 states, 14709 states have (on average 1.8056971921952547) internal successors, (26560), 14708 states have internal predecessors, (26560), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:54,541 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14709 states to 14709 states and 26560 transitions. [2022-12-13 21:47:54,541 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14709 states and 26560 transitions. [2022-12-13 21:47:54,541 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-13 21:47:54,542 INFO L428 stractBuchiCegarLoop]: Abstraction has 14709 states and 26560 transitions. [2022-12-13 21:47:54,542 INFO L335 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2022-12-13 21:47:54,542 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14709 states and 26560 transitions. [2022-12-13 21:47:54,570 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 6397 [2022-12-13 21:47:54,570 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:47:54,570 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:47:54,571 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:54,572 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:54,572 INFO L748 eck$LassoCheckResult]: Stem: 1352611#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1352612#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1357627#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1357297#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1353881#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1353882#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1355592#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1355593#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1356984#L95 assume !(0 == getOrigin_~person#1); 1353915#L99 assume !(1 == getOrigin_~person#1); 1353916#L103 assume !(2 == getOrigin_~person#1); 1358229#L107 assume !(3 == getOrigin_~person#1); 1357513#L111 assume !(4 == getOrigin_~person#1); 1356801#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1356802#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1356946#L653 assume !(0 == initPersonOnFloor_~floor#1); 1356727#L680 assume 1 == initPersonOnFloor_~floor#1; 1353487#L681 assume !(0 == initPersonOnFloor_~person#1); 1353488#L684 assume !(1 == initPersonOnFloor_~person#1); 1357750#L687 assume !(2 == initPersonOnFloor_~person#1); 1356623#L690 assume !(3 == initPersonOnFloor_~person#1); 1356624#L693 assume !(4 == initPersonOnFloor_~person#1); 1356185#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1356186#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1353034#L445 assume !(0 == callOnFloor_~floorID#1); 1353035#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1352479#L457-2 assume { :end_inline_callOnFloor } true; 1354544#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1353291#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1353292#L382 assume !(0 == isFloorCalling_~floorID#1); 1354155#L386 assume !(1 == isFloorCalling_~floorID#1); 1354156#L390 assume !(2 == isFloorCalling_~floorID#1); 1356252#L394 assume !(3 == isFloorCalling_~floorID#1); 1357306#L398 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1356843#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1356844#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1353907#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1353908#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1357770#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1352835#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1352265#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1352266#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1357986#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1354358#L382-3 assume !(0 == isFloorCalling_~floorID#1); 1354359#L386-3 assume !(1 == isFloorCalling_~floorID#1); 1356529#L390-3 assume !(2 == isFloorCalling_~floorID#1); 1352926#L394-3 assume !(3 == isFloorCalling_~floorID#1); 1352927#L398-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1355163#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1354481#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1354482#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1356654#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1358351#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1358479#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1358480#L2021 assume !(1 == ~currentHeading~0); 1358737#L2031 assume !(0 == ~currentFloorID~0); 1353804#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1354708#L2037-1 assume { :end_inline_continueInDirection } true; 1354709#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1355988#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1357607#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1352812#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1352813#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1353926#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1353927#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1356662#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1356663#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1359834#L3285-2 assume !false; 1359835#L3286 [2022-12-13 21:47:54,572 INFO L750 eck$LassoCheckResult]: Loop: 1359835#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1365775#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1365774#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1365773#L3293 assume 1 != cleanup_~tmp___0~12#1; 1356685#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1356686#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1361837#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1361497#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1361488#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1361486#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1361122#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1361121#L382-70 assume !(0 == isFloorCalling_~floorID#1); 1361120#L386-70 assume !(1 == isFloorCalling_~floorID#1); 1361119#L390-70 assume !(2 == isFloorCalling_~floorID#1); 1361118#L394-70 assume !(3 == isFloorCalling_~floorID#1); 1361117#L398-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1357644#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1357645#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1353070#L2109-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1353072#getCurrentFloorID_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1358104#L2113-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1356296#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1356297#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1357227#L2263-2 assume !(0 != ~persons_0~0); 1353037#L2263-3 assume !(0 != ~persons_1~0); 1352837#L2277-1 assume !(0 != ~persons_2~0); 1352724#L2291-1 assume !(0 != ~persons_3~0); 1352400#L2305-1 assume !(0 != ~persons_4~0); 1352614#L2319-1 assume !(0 != ~persons_5~0); 1353793#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1353794#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1357058#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1352452#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1352231#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1352233#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1357072#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1357158#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1352746#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1357244#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1354660#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1354056#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1354057#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1352434#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1354181#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1354183#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1355924#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1356806#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1352140#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1353825#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1356503#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1356777#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1357635#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1352173#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1357482#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1355709#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1355710#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1356584#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1352146#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1358363#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1352248#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1353648#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1353649#L429-41 assume { :end_inline_resetCallOnFloor } true; 1357464#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1357465#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1358270#L1355-5 assume { :end_inline_resetFloorButton } true; 1357947#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1357825#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1354712#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1354266#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1365874#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1365839#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1357908#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1352326#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1365777#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1365776#L3285-2 assume !false; 1359835#L3286 [2022-12-13 21:47:54,572 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:54,572 INFO L85 PathProgramCache]: Analyzing trace with hash 1144164555, now seen corresponding path program 1 times [2022-12-13 21:47:54,572 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:54,572 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1435013874] [2022-12-13 21:47:54,573 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:54,573 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:54,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:54,624 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:54,624 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:54,624 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1435013874] [2022-12-13 21:47:54,624 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1435013874] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:54,624 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:54,624 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 21:47:54,624 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [467014170] [2022-12-13 21:47:54,624 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:54,624 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:47:54,625 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:54,625 INFO L85 PathProgramCache]: Analyzing trace with hash 371899072, now seen corresponding path program 1 times [2022-12-13 21:47:54,625 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:54,625 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2117154725] [2022-12-13 21:47:54,625 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:54,625 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:54,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:54,644 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:54,644 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:54,644 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2117154725] [2022-12-13 21:47:54,644 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2117154725] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:54,645 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:54,645 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 21:47:54,645 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [161447015] [2022-12-13 21:47:54,645 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:54,645 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:47:54,645 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:47:54,645 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 21:47:54,645 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 21:47:54,645 INFO L87 Difference]: Start difference. First operand 14709 states and 26560 transitions. cyclomatic complexity: 11856 Second operand has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 5 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:57,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:47:57,301 INFO L93 Difference]: Finished difference Result 93188 states and 170535 transitions. [2022-12-13 21:47:57,301 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 93188 states and 170535 transitions. [2022-12-13 21:47:57,683 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 33426 [2022-12-13 21:47:57,953 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 93188 states to 93188 states and 170535 transitions. [2022-12-13 21:47:57,953 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 65835 [2022-12-13 21:47:58,002 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 65835 [2022-12-13 21:47:58,002 INFO L73 IsDeterministic]: Start isDeterministic. Operand 93188 states and 170535 transitions. [2022-12-13 21:47:58,018 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:47:58,018 INFO L218 hiAutomatonCegarLoop]: Abstraction has 93188 states and 170535 transitions. [2022-12-13 21:47:58,073 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93188 states and 170535 transitions. [2022-12-13 21:47:58,563 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93188 to 29207. [2022-12-13 21:47:58,585 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29207 states, 29207 states have (on average 1.8065874619098161) internal successors, (52765), 29206 states have internal predecessors, (52765), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:47:58,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29207 states to 29207 states and 52765 transitions. [2022-12-13 21:47:58,647 INFO L240 hiAutomatonCegarLoop]: Abstraction has 29207 states and 52765 transitions. [2022-12-13 21:47:58,648 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-13 21:47:58,648 INFO L428 stractBuchiCegarLoop]: Abstraction has 29207 states and 52765 transitions. [2022-12-13 21:47:58,648 INFO L335 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2022-12-13 21:47:58,648 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29207 states and 52765 transitions. [2022-12-13 21:47:58,733 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 12690 [2022-12-13 21:47:58,733 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:47:58,733 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:47:58,734 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:58,734 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:47:58,735 INFO L748 eck$LassoCheckResult]: Stem: 1460537#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1460538#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1465422#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1465125#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1461796#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1461797#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1463489#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1463490#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1464815#L95 assume !(0 == getOrigin_~person#1); 1461830#L99 assume !(1 == getOrigin_~person#1); 1461831#L103 assume !(2 == getOrigin_~person#1); 1465961#L107 assume !(3 == getOrigin_~person#1); 1465325#L111 assume !(4 == getOrigin_~person#1); 1464646#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1464647#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1464779#L653 assume !(0 == initPersonOnFloor_~floor#1); 1464570#L680 assume 1 == initPersonOnFloor_~floor#1; 1461405#L681 assume !(0 == initPersonOnFloor_~person#1); 1461406#L684 assume !(1 == initPersonOnFloor_~person#1); 1465529#L687 assume !(2 == initPersonOnFloor_~person#1); 1464478#L690 assume !(3 == initPersonOnFloor_~person#1); 1464479#L693 assume !(4 == initPersonOnFloor_~person#1); 1464058#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1464059#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1460964#L445 assume !(0 == callOnFloor_~floorID#1); 1460965#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1460401#L457-2 assume { :end_inline_callOnFloor } true; 1462459#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1461211#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1461212#L382 assume !(0 == isFloorCalling_~floorID#1); 1462073#L386 assume !(1 == isFloorCalling_~floorID#1); 1462074#L390 assume !(2 == isFloorCalling_~floorID#1); 1464128#L394 assume !(3 == isFloorCalling_~floorID#1); 1465136#L398 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1464683#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1464684#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1461822#L2109 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1461823#L2083-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1466019#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1466020#L1389-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1465665#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1463144#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1472593#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1472591#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1472590#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1472171#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1472170#L382-3 assume !(0 == isFloorCalling_~floorID#1); 1472169#L386-3 assume !(1 == isFloorCalling_~floorID#1); 1472168#L390-3 assume !(2 == isFloorCalling_~floorID#1); 1472167#L394-3 assume !(3 == isFloorCalling_~floorID#1); 1472166#L398-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1472165#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1472164#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1472162#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1472163#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1472638#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1472631#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1472632#L2021 assume !(1 == ~currentHeading~0); 1472855#L2031 assume !(0 == ~currentFloorID~0); 1463545#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1463546#L2037-1 assume { :end_inline_continueInDirection } true; 1486580#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1486579#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1486578#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1486567#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1486576#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1486530#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1486533#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1486517#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1486515#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1485281#L3285-2 assume !false; 1485282#L3286 [2022-12-13 21:47:58,735 INFO L750 eck$LassoCheckResult]: Loop: 1485282#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1485449#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1485441#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1485438#L3293 assume 1 != cleanup_~tmp___0~12#1; 1485435#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1485434#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1485425#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1485388#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1460403#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1460404#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1462678#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1466085#L382-70 assume !(0 == isFloorCalling_~floorID#1); 1464031#L386-70 assume !(1 == isFloorCalling_~floorID#1); 1464032#L390-70 assume !(2 == isFloorCalling_~floorID#1); 1464366#L394-70 assume !(3 == isFloorCalling_~floorID#1); 1464367#L398-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1465436#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1465437#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1460992#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1460993#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1470667#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1470668#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1470660#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1470658#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1470656#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1470657#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1480819#L2263-2 assume !(0 != ~persons_0~0); 1486420#L2263-3 assume !(0 != ~persons_1~0); 1486392#L2277-1 assume !(0 != ~persons_2~0); 1486372#L2291-1 assume !(0 != ~persons_3~0); 1486366#L2305-1 assume !(0 != ~persons_4~0); 1486358#L2319-1 assume !(0 != ~persons_5~0); 1486357#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1486354#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1486333#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1486320#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1486319#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1486318#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1486317#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1486061#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1486059#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1486057#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1486055#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1486053#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1486042#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1486021#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1486019#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1486017#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1486016#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1485984#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1485972#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1485970#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1485937#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1485934#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1485922#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1485890#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1485888#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1485886#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1485885#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1485828#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1485809#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1485807#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1485805#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1485758#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1484299#L429-41 assume { :end_inline_resetCallOnFloor } true; 1485742#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1485699#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1485694#L1355-5 assume { :end_inline_resetFloorButton } true; 1485651#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1485643#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1485632#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1485500#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1485507#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1485497#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1485488#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1485480#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1485477#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1485466#L3285-2 assume !false; 1485282#L3286 [2022-12-13 21:47:58,736 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:58,736 INFO L85 PathProgramCache]: Analyzing trace with hash 1222667021, now seen corresponding path program 1 times [2022-12-13 21:47:58,736 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:58,736 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [524042305] [2022-12-13 21:47:58,736 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:58,736 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:58,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:58,816 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:58,816 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:58,816 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [524042305] [2022-12-13 21:47:58,816 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [524042305] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:58,816 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:58,817 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 21:47:58,817 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [614101809] [2022-12-13 21:47:58,817 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:58,817 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:47:58,817 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:47:58,817 INFO L85 PathProgramCache]: Analyzing trace with hash 1794998960, now seen corresponding path program 1 times [2022-12-13 21:47:58,818 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:47:58,818 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1688013185] [2022-12-13 21:47:58,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:47:58,818 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:47:58,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:47:58,894 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:47:58,895 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:47:58,895 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1688013185] [2022-12-13 21:47:58,895 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1688013185] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:47:58,895 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:47:58,895 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 21:47:58,895 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1065448728] [2022-12-13 21:47:58,895 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:47:58,896 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:47:58,896 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:47:58,896 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 21:47:58,896 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 21:47:58,896 INFO L87 Difference]: Start difference. First operand 29207 states and 52765 transitions. cyclomatic complexity: 23568 Second operand has 6 states, 6 states have (on average 11.833333333333334) internal successors, (71), 5 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:01,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:48:01,164 INFO L93 Difference]: Finished difference Result 91930 states and 168732 transitions. [2022-12-13 21:48:01,164 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 91930 states and 168732 transitions. [2022-12-13 21:48:01,445 INFO L131 ngComponentsAnalysis]: Automaton has 11 accepting balls. 38553 [2022-12-13 21:48:01,656 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 91930 states to 91930 states and 168732 transitions. [2022-12-13 21:48:01,656 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 63683 [2022-12-13 21:48:01,698 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 63683 [2022-12-13 21:48:01,698 INFO L73 IsDeterministic]: Start isDeterministic. Operand 91930 states and 168732 transitions. [2022-12-13 21:48:01,704 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:48:01,704 INFO L218 hiAutomatonCegarLoop]: Abstraction has 91930 states and 168732 transitions. [2022-12-13 21:48:01,752 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91930 states and 168732 transitions. [2022-12-13 21:48:02,202 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91930 to 29172. [2022-12-13 21:48:02,224 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29172 states, 29172 states have (on average 1.806423968188674) internal successors, (52697), 29171 states have internal predecessors, (52697), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:02,297 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29172 states to 29172 states and 52697 transitions. [2022-12-13 21:48:02,298 INFO L240 hiAutomatonCegarLoop]: Abstraction has 29172 states and 52697 transitions. [2022-12-13 21:48:02,298 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-13 21:48:02,298 INFO L428 stractBuchiCegarLoop]: Abstraction has 29172 states and 52697 transitions. [2022-12-13 21:48:02,298 INFO L335 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2022-12-13 21:48:02,299 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29172 states and 52697 transitions. [2022-12-13 21:48:02,379 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 12679 [2022-12-13 21:48:02,379 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:48:02,380 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:48:02,381 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:02,381 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:02,381 INFO L748 eck$LassoCheckResult]: Stem: 1581702#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1581703#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1587015#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1586641#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1582990#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1582991#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1584743#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1584744#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1586260#L95 assume !(0 == getOrigin_~person#1); 1583025#L99 assume !(1 == getOrigin_~person#1); 1583026#L103 assume !(2 == getOrigin_~person#1); 1587774#L107 assume !(3 == getOrigin_~person#1); 1586886#L111 assume !(4 == getOrigin_~person#1); 1586057#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1586058#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1586219#L653 assume !(0 == initPersonOnFloor_~floor#1); 1585968#L680 assume 1 == initPersonOnFloor_~floor#1; 1582584#L681 assume !(0 == initPersonOnFloor_~person#1); 1582585#L684 assume !(1 == initPersonOnFloor_~person#1); 1587160#L687 assume !(2 == initPersonOnFloor_~person#1); 1585854#L690 assume !(3 == initPersonOnFloor_~person#1); 1585855#L693 assume !(4 == initPersonOnFloor_~person#1); 1585366#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1585367#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1582132#L445 assume !(0 == callOnFloor_~floorID#1); 1582133#L448 assume !(1 == callOnFloor_~floorID#1); 1581564#L451 assume !(2 == callOnFloor_~floorID#1); 1581566#L454 assume !(3 == callOnFloor_~floorID#1); 1581650#L457 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 1581651#L457-2 assume { :end_inline_callOnFloor } true; 1588067#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1588066#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1588065#L382 assume !(0 == isFloorCalling_~floorID#1); 1588064#L386 assume !(1 == isFloorCalling_~floorID#1); 1588063#L390 assume !(2 == isFloorCalling_~floorID#1); 1588062#L394 assume !(3 == isFloorCalling_~floorID#1); 1588061#L398 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1588060#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1588059#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1588058#L2109 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1587182#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1587183#L2113 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1585107#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1588114#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1588113#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1588057#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1588056#L382-3 assume !(0 == isFloorCalling_~floorID#1); 1588055#L386-3 assume !(1 == isFloorCalling_~floorID#1); 1588054#L390-3 assume !(2 == isFloorCalling_~floorID#1); 1588053#L394-3 assume !(3 == isFloorCalling_~floorID#1); 1588052#L398-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1588051#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1588050#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1588049#L1964 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1587934#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret38#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~1#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~16#1 := (if stopRequestedInDirection_~__cil_tmp8~1#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1587935#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1588186#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1588187#L2021 assume !(1 == ~currentHeading~0); 1588953#L2031 assume !(0 == ~currentFloorID~0); 1582909#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1590095#L2037-1 assume { :end_inline_continueInDirection } true; 1591267#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1591266#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1591264#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1591259#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1591260#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1591250#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1591253#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1591243#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1591242#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1591240#L3285-2 assume !false; 1591241#L3286 [2022-12-13 21:48:02,382 INFO L750 eck$LassoCheckResult]: Loop: 1591241#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1603358#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1603357#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1603356#L3293 assume 1 != cleanup_~tmp___0~12#1; 1603355#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1595736#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1595725#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1595673#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1595643#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1595629#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1595588#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1595589#L382-70 assume !(0 == isFloorCalling_~floorID#1); 1595584#L386-70 assume !(1 == isFloorCalling_~floorID#1); 1595585#L390-70 assume !(2 == isFloorCalling_~floorID#1); 1595580#L394-70 assume !(3 == isFloorCalling_~floorID#1); 1595581#L398-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1595576#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1595577#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1595571#L2109-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1595573#getCurrentFloorID_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret47#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret47#1;havoc stopRequestedAtCurrentFloor_#t~ret47#1; 1595567#L2113-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1595563#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1595561#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1595562#L2263-2 assume !(0 != ~persons_0~0); 1606017#L2263-3 assume !(0 != ~persons_1~0); 1606012#L2277-1 assume !(0 != ~persons_2~0); 1605991#L2291-1 assume !(0 != ~persons_3~0); 1605989#L2305-1 assume !(0 != ~persons_4~0); 1605953#L2319-1 assume !(0 != ~persons_5~0); 1605952#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1605951#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1605889#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1605875#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1605872#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1605870#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1605869#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1605808#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1605801#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1605798#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1605796#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1605795#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1605670#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1605648#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1605646#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1605644#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1605642#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1605543#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1604982#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1604979#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1604197#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1604195#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1604194#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1604163#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1603719#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1603711#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1603709#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1603685#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1603666#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1603664#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1603662#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1603661#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1603650#L429-41 assume { :end_inline_resetCallOnFloor } true; 1603649#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1603647#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1603638#L1355-5 assume { :end_inline_resetFloorButton } true; 1603637#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1603632#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1603627#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1603587#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1603643#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1603583#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1603574#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1603570#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1603569#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1603436#L3285-2 assume !false; 1591241#L3286 [2022-12-13 21:48:02,382 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:02,382 INFO L85 PathProgramCache]: Analyzing trace with hash 1317218144, now seen corresponding path program 1 times [2022-12-13 21:48:02,382 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:02,382 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [590857792] [2022-12-13 21:48:02,383 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:02,383 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:02,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:02,445 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:02,445 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:02,445 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [590857792] [2022-12-13 21:48:02,445 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [590857792] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:02,445 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:02,445 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 21:48:02,445 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1154898620] [2022-12-13 21:48:02,445 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:02,446 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:48:02,446 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:02,446 INFO L85 PathProgramCache]: Analyzing trace with hash 371899072, now seen corresponding path program 2 times [2022-12-13 21:48:02,446 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:02,446 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [7694002] [2022-12-13 21:48:02,446 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:02,447 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:02,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:02,472 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:02,472 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:02,472 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [7694002] [2022-12-13 21:48:02,472 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [7694002] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:02,472 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:02,472 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 21:48:02,472 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [684164272] [2022-12-13 21:48:02,472 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:02,473 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:48:02,473 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:48:02,473 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 21:48:02,473 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 21:48:02,473 INFO L87 Difference]: Start difference. First operand 29172 states and 52697 transitions. cyclomatic complexity: 23535 Second operand has 5 states, 5 states have (on average 14.2) internal successors, (71), 5 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:02,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:48:02,579 INFO L93 Difference]: Finished difference Result 14489 states and 26163 transitions. [2022-12-13 21:48:02,579 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14489 states and 26163 transitions. [2022-12-13 21:48:02,631 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 6282 [2022-12-13 21:48:02,669 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14489 states to 14489 states and 26163 transitions. [2022-12-13 21:48:02,669 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10180 [2022-12-13 21:48:02,676 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10180 [2022-12-13 21:48:02,676 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14489 states and 26163 transitions. [2022-12-13 21:48:02,677 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:48:02,677 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14489 states and 26163 transitions. [2022-12-13 21:48:02,685 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14489 states and 26163 transitions. [2022-12-13 21:48:02,814 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14489 to 14489. [2022-12-13 21:48:02,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14489 states, 14489 states have (on average 1.8057146801021464) internal successors, (26163), 14488 states have internal predecessors, (26163), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:02,855 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14489 states to 14489 states and 26163 transitions. [2022-12-13 21:48:02,855 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14489 states and 26163 transitions. [2022-12-13 21:48:02,856 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 21:48:02,856 INFO L428 stractBuchiCegarLoop]: Abstraction has 14489 states and 26163 transitions. [2022-12-13 21:48:02,856 INFO L335 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2022-12-13 21:48:02,856 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14489 states and 26163 transitions. [2022-12-13 21:48:02,896 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 6282 [2022-12-13 21:48:02,896 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:48:02,896 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:48:02,898 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:02,898 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:02,898 INFO L748 eck$LassoCheckResult]: Stem: 1625365#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1625366#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1630093#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1629821#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1626608#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1626609#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1628262#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1628263#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1629528#L95 assume !(0 == getOrigin_~person#1); 1626641#L99 assume !(1 == getOrigin_~person#1); 1626642#L103 assume !(2 == getOrigin_~person#1); 1630559#L107 assume !(3 == getOrigin_~person#1); 1630006#L111 assume !(4 == getOrigin_~person#1); 1629364#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1629365#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1629496#L653 assume !(0 == initPersonOnFloor_~floor#1); 1629289#L680 assume 1 == initPersonOnFloor_~floor#1; 1626227#L681 assume !(0 == initPersonOnFloor_~person#1); 1626228#L684 assume !(1 == initPersonOnFloor_~person#1); 1630190#L687 assume !(2 == initPersonOnFloor_~person#1); 1629193#L690 assume !(3 == initPersonOnFloor_~person#1); 1629194#L693 assume !(4 == initPersonOnFloor_~person#1); 1628814#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1628815#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1625785#L445 assume !(0 == callOnFloor_~floorID#1); 1625786#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1629181#L457-2 assume { :end_inline_callOnFloor } true; 1627261#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1626037#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1626038#L382 assume !(0 == isFloorCalling_~floorID#1); 1626881#L386 assume !(1 == isFloorCalling_~floorID#1); 1626882#L390 assume !(2 == isFloorCalling_~floorID#1); 1628875#L394 assume !(3 == isFloorCalling_~floorID#1); 1629830#L398 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1629399#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1629400#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1626634#L2109 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1626158#L2083-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1626159#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1628349#L1389-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1627450#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1627858#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1625591#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1625026#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1625027#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1630374#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1627080#L382-3 assume !(0 == isFloorCalling_~floorID#1); 1627081#L386-3 assume !(1 == isFloorCalling_~floorID#1); 1629106#L390-3 assume !(2 == isFloorCalling_~floorID#1); 1625682#L394-3 assume !(3 == isFloorCalling_~floorID#1); 1625683#L398-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1627844#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1627200#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1627201#L1964 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret34#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret35#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1; 1628759#L1986 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~17#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~17#1; 1625115#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 1626764#L1930 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_#t~ret24#1, stopRequestedInDirection__wrappee__empty_#t~ret25#1, stopRequestedInDirection__wrappee__empty_#t~ret26#1, stopRequestedInDirection__wrappee__empty_#t~ret27#1, stopRequestedInDirection__wrappee__empty_#t~ret28#1, stopRequestedInDirection__wrappee__empty_#t~ret29#1, stopRequestedInDirection__wrappee__empty_#t~ret30#1, stopRequestedInDirection__wrappee__empty_#t~ret31#1, stopRequestedInDirection__wrappee__empty_#t~ret32#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~4#1, stopRequestedInDirection__wrappee__empty_~tmp___1~4#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1626853#L1576-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 1626275#L1745-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 1626276#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1; 1630861#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret39#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~16#1 := stopRequestedInDirection_#t~ret39#1;havoc stopRequestedInDirection_#t~ret39#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1630860#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1630858#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1630857#L2021 assume !(1 == ~currentHeading~0); 1630855#L2031 assume !(0 == ~currentFloorID~0); 1626535#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1627418#L2037-1 assume { :end_inline_continueInDirection } true; 1627419#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1627324#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1627325#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1625880#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1630490#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1630491#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1629055#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1624966#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1630578#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1630579#L3285-2 assume !false; 1631007#L3286 [2022-12-13 21:48:02,899 INFO L750 eck$LassoCheckResult]: Loop: 1631007#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1633503#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1633502#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1633501#L3293 assume 1 != cleanup_~tmp___0~12#1; 1633500#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1633499#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1633494#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1632620#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1632610#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1632608#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1632606#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1632603#L382-70 assume !(0 == isFloorCalling_~floorID#1); 1632600#L386-70 assume !(1 == isFloorCalling_~floorID#1); 1632597#L390-70 assume !(2 == isFloorCalling_~floorID#1); 1632556#L394-70 assume !(3 == isFloorCalling_~floorID#1); 1632552#L398-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1632548#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1632547#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1632546#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1632545#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1632544#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1632523#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1632512#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1632507#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1632504#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1632499#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1632500#L2263-2 assume !(0 != ~persons_0~0); 1633982#L2263-3 assume !(0 != ~persons_1~0); 1633977#L2277-1 assume !(0 != ~persons_2~0); 1633956#L2291-1 assume !(0 != ~persons_3~0); 1633954#L2305-1 assume !(0 != ~persons_4~0); 1633918#L2319-1 assume !(0 != ~persons_5~0); 1633917#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1633916#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1633857#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1633843#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1633841#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1633839#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1633838#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1633792#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1633790#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1633788#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1633786#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1633785#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1633759#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1633737#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1633735#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1633733#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1633731#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1633685#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1633674#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1633672#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1633668#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1633666#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1633664#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1633631#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1633629#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1633626#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1633625#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1633563#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1633544#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1633542#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1633540#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1633539#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1633534#L429-41 assume { :end_inline_resetCallOnFloor } true; 1633533#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1633531#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1633527#L1355-5 assume { :end_inline_resetFloorButton } true; 1633526#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1633525#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1633524#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1632856#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1632753#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1632750#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1632751#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1633506#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1633505#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1633504#L3285-2 assume !false; 1631007#L3286 [2022-12-13 21:48:02,899 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:02,899 INFO L85 PathProgramCache]: Analyzing trace with hash 1200994683, now seen corresponding path program 1 times [2022-12-13 21:48:02,900 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:02,900 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [238669176] [2022-12-13 21:48:02,900 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:02,900 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:02,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:02,937 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:02,938 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:02,938 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [238669176] [2022-12-13 21:48:02,938 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [238669176] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:02,938 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:02,938 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 21:48:02,938 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1474864689] [2022-12-13 21:48:02,938 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:02,939 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:48:02,939 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:02,939 INFO L85 PathProgramCache]: Analyzing trace with hash 1794998960, now seen corresponding path program 2 times [2022-12-13 21:48:02,939 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:02,939 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1032017283] [2022-12-13 21:48:02,939 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:02,940 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:02,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:02,997 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:02,997 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:02,997 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1032017283] [2022-12-13 21:48:02,998 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1032017283] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:02,998 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:02,998 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 21:48:02,998 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [519981533] [2022-12-13 21:48:02,998 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:02,998 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:48:02,998 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:48:02,999 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 21:48:02,999 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 21:48:02,999 INFO L87 Difference]: Start difference. First operand 14489 states and 26163 transitions. cyclomatic complexity: 11679 Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 2 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:03,223 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:48:03,223 INFO L93 Difference]: Finished difference Result 27140 states and 48953 transitions. [2022-12-13 21:48:03,223 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27140 states and 48953 transitions. [2022-12-13 21:48:03,331 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 12400 [2022-12-13 21:48:03,406 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27140 states to 27140 states and 48953 transitions. [2022-12-13 21:48:03,406 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18622 [2022-12-13 21:48:03,419 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18622 [2022-12-13 21:48:03,419 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27140 states and 48953 transitions. [2022-12-13 21:48:03,420 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:48:03,421 INFO L218 hiAutomatonCegarLoop]: Abstraction has 27140 states and 48953 transitions. [2022-12-13 21:48:03,436 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27140 states and 48953 transitions. [2022-12-13 21:48:03,674 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27140 to 27140. [2022-12-13 21:48:03,694 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27140 states, 27140 states have (on average 1.8037214443625644) internal successors, (48953), 27139 states have internal predecessors, (48953), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:03,752 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27140 states to 27140 states and 48953 transitions. [2022-12-13 21:48:03,752 INFO L240 hiAutomatonCegarLoop]: Abstraction has 27140 states and 48953 transitions. [2022-12-13 21:48:03,753 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 21:48:03,753 INFO L428 stractBuchiCegarLoop]: Abstraction has 27140 states and 48953 transitions. [2022-12-13 21:48:03,753 INFO L335 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2022-12-13 21:48:03,753 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27140 states and 48953 transitions. [2022-12-13 21:48:03,834 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 12400 [2022-12-13 21:48:03,834 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:48:03,834 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:48:03,836 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:03,836 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:03,837 INFO L748 eck$LassoCheckResult]: Stem: 1667000#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1667001#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1671877#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1671571#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1668264#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1668265#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1669937#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1669938#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1671261#L95 assume !(0 == getOrigin_~person#1); 1668297#L99 assume !(1 == getOrigin_~person#1); 1668298#L103 assume !(2 == getOrigin_~person#1); 1672434#L107 assume !(3 == getOrigin_~person#1); 1671781#L111 assume !(4 == getOrigin_~person#1); 1671089#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1671090#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1671228#L653 assume !(0 == initPersonOnFloor_~floor#1); 1671013#L680 assume 1 == initPersonOnFloor_~floor#1; 1667867#L681 assume !(0 == initPersonOnFloor_~person#1); 1667868#L684 assume !(1 == initPersonOnFloor_~person#1); 1671992#L687 assume !(2 == initPersonOnFloor_~person#1); 1670914#L690 assume !(3 == initPersonOnFloor_~person#1); 1670915#L693 assume !(4 == initPersonOnFloor_~person#1); 1670506#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1670507#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1667421#L445 assume !(0 == callOnFloor_~floorID#1); 1667422#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1670901#L457-2 assume { :end_inline_callOnFloor } true; 1668929#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1667676#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1667677#L382 assume !(0 == isFloorCalling_~floorID#1); 1668540#L386 assume !(1 == isFloorCalling_~floorID#1); 1668541#L390 assume !(2 == isFloorCalling_~floorID#1); 1670577#L394 assume !(3 == isFloorCalling_~floorID#1); 1671580#L398 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1671126#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1671127#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1668290#L2109 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1667799#L2083-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1667800#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1670026#L1389-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1669117#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1669537#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1667225#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1666663#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1666664#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1672221#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1668743#L382-3 assume !(0 == isFloorCalling_~floorID#1); 1668744#L386-3 assume !(1 == isFloorCalling_~floorID#1); 1670826#L390-3 assume !(2 == isFloorCalling_~floorID#1); 1667315#L394-3 assume !(3 == isFloorCalling_~floorID#1); 1667316#L398-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1669522#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1668867#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1668868#L1964 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret34#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret35#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1; 1670448#L1986 assume !(0 != ~floorButtons_0~0); 1667182#L1990 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~17#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~17#1; 1666752#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 1668421#L1930 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_#t~ret24#1, stopRequestedInDirection__wrappee__empty_#t~ret25#1, stopRequestedInDirection__wrappee__empty_#t~ret26#1, stopRequestedInDirection__wrappee__empty_#t~ret27#1, stopRequestedInDirection__wrappee__empty_#t~ret28#1, stopRequestedInDirection__wrappee__empty_#t~ret29#1, stopRequestedInDirection__wrappee__empty_#t~ret30#1, stopRequestedInDirection__wrappee__empty_#t~ret31#1, stopRequestedInDirection__wrappee__empty_#t~ret32#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~4#1, stopRequestedInDirection__wrappee__empty_~tmp___1~4#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1668512#L1576-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 1667917#L1745-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 1667918#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1; 1672719#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret39#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~16#1 := stopRequestedInDirection_#t~ret39#1;havoc stopRequestedInDirection_#t~ret39#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1672718#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1672716#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1672717#L2021 assume !(1 == ~currentHeading~0); 1672907#L2031 assume !(0 == ~currentFloorID~0); 1668187#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1669994#L2037-1 assume { :end_inline_continueInDirection } true; 1676239#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1676238#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1676236#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1676230#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1676229#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1676222#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1676225#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1676215#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1676214#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1676212#L3285-2 assume !false; 1676213#L3286 [2022-12-13 21:48:03,837 INFO L750 eck$LassoCheckResult]: Loop: 1676213#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1681881#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1681880#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1681879#L3293 assume 1 != cleanup_~tmp___0~12#1; 1681878#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1681873#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1681867#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1681850#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1681841#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1681840#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1681839#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1681838#L382-70 assume !(0 == isFloorCalling_~floorID#1); 1681837#L386-70 assume !(1 == isFloorCalling_~floorID#1); 1681836#L390-70 assume !(2 == isFloorCalling_~floorID#1); 1681835#L394-70 assume !(3 == isFloorCalling_~floorID#1); 1681834#L398-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1681833#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1681832#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1681831#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1681829#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1681830#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1681812#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1681809#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1681807#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1681806#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1681799#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1681796#L2263-2 assume !(0 != ~persons_0~0); 1681756#L2263-3 assume !(0 != ~persons_1~0); 1681751#L2277-1 assume !(0 != ~persons_2~0); 1681731#L2291-1 assume !(0 != ~persons_3~0); 1681729#L2305-1 assume !(0 != ~persons_4~0); 1681695#L2319-1 assume !(0 != ~persons_5~0); 1681694#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1681693#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1681672#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1681659#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1681657#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1681658#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1682487#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1682377#L474-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1682375#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1682373#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1682371#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1682370#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1682153#L474-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1682131#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1682129#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1682121#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1682119#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1682088#L474-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1682076#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1682074#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1682072#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1682071#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1681148#L474-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1681116#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1681114#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1681112#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1681111#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1681093#L474-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1681075#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1681073#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1681074#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1681922#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1681917#L429-41 assume { :end_inline_resetCallOnFloor } true; 1681916#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1681914#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1680645#L1355-5 assume { :end_inline_resetFloorButton } true; 1681909#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1681908#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1681907#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1681902#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1681910#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1681899#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1681890#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1681886#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1681885#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1681884#L3285-2 assume !false; 1676213#L3286 [2022-12-13 21:48:03,838 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:03,838 INFO L85 PathProgramCache]: Analyzing trace with hash -250151552, now seen corresponding path program 1 times [2022-12-13 21:48:03,838 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:03,838 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1330335591] [2022-12-13 21:48:03,838 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:03,839 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:03,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:03,877 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:03,877 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:03,877 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1330335591] [2022-12-13 21:48:03,877 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1330335591] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:03,877 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:03,877 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 21:48:03,878 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [729076201] [2022-12-13 21:48:03,878 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:03,878 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:48:03,878 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:03,878 INFO L85 PathProgramCache]: Analyzing trace with hash 1794998960, now seen corresponding path program 3 times [2022-12-13 21:48:03,879 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:03,879 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [317261086] [2022-12-13 21:48:03,879 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:03,879 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:03,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:03,934 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:03,934 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:03,934 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [317261086] [2022-12-13 21:48:03,934 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [317261086] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:03,935 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:03,935 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 21:48:03,935 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2055991185] [2022-12-13 21:48:03,935 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:03,935 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:48:03,935 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:48:03,936 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 21:48:03,936 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 21:48:03,936 INFO L87 Difference]: Start difference. First operand 27140 states and 48953 transitions. cyclomatic complexity: 21818 Second operand has 4 states, 4 states have (on average 19.5) internal successors, (78), 4 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:05,063 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:48:05,063 INFO L93 Difference]: Finished difference Result 60477 states and 107867 transitions. [2022-12-13 21:48:05,063 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60477 states and 107867 transitions. [2022-12-13 21:48:05,247 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 27092 [2022-12-13 21:48:05,381 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60477 states to 60477 states and 107867 transitions. [2022-12-13 21:48:05,381 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40283 [2022-12-13 21:48:05,406 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40283 [2022-12-13 21:48:05,406 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60477 states and 107867 transitions. [2022-12-13 21:48:05,408 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:48:05,408 INFO L218 hiAutomatonCegarLoop]: Abstraction has 60477 states and 107867 transitions. [2022-12-13 21:48:05,438 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60477 states and 107867 transitions. [2022-12-13 21:48:05,712 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60477 to 27140. [2022-12-13 21:48:05,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27140 states, 27140 states have (on average 1.790825350036846) internal successors, (48603), 27139 states have internal predecessors, (48603), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:05,771 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27140 states to 27140 states and 48603 transitions. [2022-12-13 21:48:05,771 INFO L240 hiAutomatonCegarLoop]: Abstraction has 27140 states and 48603 transitions. [2022-12-13 21:48:05,772 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 21:48:05,772 INFO L428 stractBuchiCegarLoop]: Abstraction has 27140 states and 48603 transitions. [2022-12-13 21:48:05,773 INFO L335 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2022-12-13 21:48:05,773 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27140 states and 48603 transitions. [2022-12-13 21:48:05,830 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 12400 [2022-12-13 21:48:05,830 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:48:05,830 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:48:05,832 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:05,832 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:05,832 INFO L748 eck$LassoCheckResult]: Stem: 1754631#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1754632#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1759506#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1759210#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1755883#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1755884#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1757580#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1757581#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1758898#L95 assume !(0 == getOrigin_~person#1); 1755917#L99 assume !(1 == getOrigin_~person#1); 1755918#L103 assume !(2 == getOrigin_~person#1); 1760046#L107 assume !(3 == getOrigin_~person#1); 1759411#L111 assume !(4 == getOrigin_~person#1); 1758726#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1758727#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1758857#L653 assume !(0 == initPersonOnFloor_~floor#1); 1758648#L680 assume 1 == initPersonOnFloor_~floor#1; 1755498#L681 assume !(0 == initPersonOnFloor_~person#1); 1755499#L684 assume !(1 == initPersonOnFloor_~person#1); 1759613#L687 assume !(2 == initPersonOnFloor_~person#1); 1758555#L690 assume !(3 == initPersonOnFloor_~person#1); 1758556#L693 assume !(4 == initPersonOnFloor_~person#1); 1758152#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1758153#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1755054#L445 assume !(0 == callOnFloor_~floorID#1); 1755055#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1758539#L457-2 assume { :end_inline_callOnFloor } true; 1756553#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1755300#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1755301#L382 assume !(0 == isFloorCalling_~floorID#1); 1756164#L386 assume !(1 == isFloorCalling_~floorID#1); 1756165#L390 assume !(2 == isFloorCalling_~floorID#1); 1758221#L394 assume !(3 == isFloorCalling_~floorID#1); 1759221#L398 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1758762#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1758763#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1755909#L2109 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1755423#L2083-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1755424#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1757668#L1389-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1756745#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1757173#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1754859#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1754289#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1754290#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1759821#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1756374#L382-3 assume !(0 == isFloorCalling_~floorID#1); 1756375#L386-3 assume !(1 == isFloorCalling_~floorID#1); 1758461#L390-3 assume !(2 == isFloorCalling_~floorID#1); 1754953#L394-3 assume !(3 == isFloorCalling_~floorID#1); 1754954#L398-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1757156#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1756486#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1756487#L1964 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret34#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret35#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1; 1758091#L1986 assume !(0 != ~floorButtons_0~0); 1754810#L1990 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~17#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~17#1; 1754378#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 1756041#L1930 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_#t~ret24#1, stopRequestedInDirection__wrappee__empty_#t~ret25#1, stopRequestedInDirection__wrappee__empty_#t~ret26#1, stopRequestedInDirection__wrappee__empty_#t~ret27#1, stopRequestedInDirection__wrappee__empty_#t~ret28#1, stopRequestedInDirection__wrappee__empty_#t~ret29#1, stopRequestedInDirection__wrappee__empty_#t~ret30#1, stopRequestedInDirection__wrappee__empty_#t~ret31#1, stopRequestedInDirection__wrappee__empty_#t~ret32#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~4#1, stopRequestedInDirection__wrappee__empty_~tmp___1~4#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1756134#L1576-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 1755542#L1745-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 1755543#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1; 1760288#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret39#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~16#1 := stopRequestedInDirection_#t~ret39#1;havoc stopRequestedInDirection_#t~ret39#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1760286#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1760284#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1760285#L2021 assume !(1 == ~currentHeading~0); 1760507#L2031 assume !(0 == ~currentFloorID~0); 1755808#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1757637#L2037-1 assume { :end_inline_continueInDirection } true; 1766056#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1766055#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1766053#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1766048#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1766049#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1766039#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1766042#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1766032#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1766031#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1766029#L3285-2 assume !false; 1766030#L3286 [2022-12-13 21:48:05,832 INFO L750 eck$LassoCheckResult]: Loop: 1766030#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1771696#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1771695#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1771694#L3293 assume 1 != cleanup_~tmp___0~12#1; 1771690#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1771684#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1771669#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1771662#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1771652#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1771651#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1771644#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1771642#L382-70 assume !(0 == isFloorCalling_~floorID#1); 1771640#L386-70 assume !(1 == isFloorCalling_~floorID#1); 1771635#L390-70 assume !(2 == isFloorCalling_~floorID#1); 1771629#L394-70 assume !(3 == isFloorCalling_~floorID#1); 1771623#L398-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1771621#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1771616#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1771615#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1771610#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1771540#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1771534#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1771521#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1771518#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1771457#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1771455#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1771456#L2263-2 assume !(0 != ~persons_0~0); 1772923#L2263-3 assume !(0 != ~persons_1~0); 1771869#L2277-1 assume !(0 != ~persons_2~0); 1771861#L2291-1 assume !(0 != ~persons_3~0); 1771638#L2305-1 assume !(0 != ~persons_4~0); 1771601#L2319-1 assume !(0 != ~persons_5~0); 1771109#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1771108#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1771085#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1771066#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1771063#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1768245#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1768243#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1768244#L474-7 assume !(0 == isPersonOnFloor_~person#1); 1768216#L478-7 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1768207#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1768204#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1768202#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1768200#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1768193#L474-8 assume !(0 == isPersonOnFloor_~person#1); 1768178#L478-8 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1768158#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1768156#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1768153#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1768150#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1768151#L474-9 assume !(0 == isPersonOnFloor_~person#1); 1768130#L478-9 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1768119#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1768117#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1768118#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1768635#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1768634#L474-10 assume !(0 == isPersonOnFloor_~person#1); 1768515#L478-10 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1768498#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1768493#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1768490#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1768489#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1768488#L474-11 assume !(0 == isPersonOnFloor_~person#1); 1768463#L478-11 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1768446#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1768444#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1768445#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1771735#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1771730#L429-41 assume { :end_inline_resetCallOnFloor } true; 1771729#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1771727#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1767597#L1355-5 assume { :end_inline_resetFloorButton } true; 1771723#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1771722#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1771721#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1771716#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1771714#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1771712#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1771703#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1771699#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1771698#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1771697#L3285-2 assume !false; 1766030#L3286 [2022-12-13 21:48:05,833 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:05,833 INFO L85 PathProgramCache]: Analyzing trace with hash -250151552, now seen corresponding path program 2 times [2022-12-13 21:48:05,833 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:05,833 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1407712307] [2022-12-13 21:48:05,833 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:05,833 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:05,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:05,862 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:05,862 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:05,863 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1407712307] [2022-12-13 21:48:05,863 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1407712307] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:05,863 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:05,863 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 21:48:05,863 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1394011915] [2022-12-13 21:48:05,863 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:05,863 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:48:05,863 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:05,863 INFO L85 PathProgramCache]: Analyzing trace with hash -801924708, now seen corresponding path program 1 times [2022-12-13 21:48:05,863 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:05,863 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1675121626] [2022-12-13 21:48:05,864 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:05,864 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:05,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:05,884 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:05,884 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:05,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1675121626] [2022-12-13 21:48:05,884 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1675121626] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:05,884 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:05,884 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 21:48:05,884 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1314068411] [2022-12-13 21:48:05,884 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:05,884 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:48:05,885 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:48:05,885 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 21:48:05,885 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 21:48:05,885 INFO L87 Difference]: Start difference. First operand 27140 states and 48603 transitions. cyclomatic complexity: 21468 Second operand has 3 states, 3 states have (on average 26.0) internal successors, (78), 2 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:06,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:48:06,116 INFO L93 Difference]: Finished difference Result 52398 states and 93651 transitions. [2022-12-13 21:48:06,116 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 52398 states and 93651 transitions. [2022-12-13 21:48:06,312 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 24677 [2022-12-13 21:48:06,465 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 52398 states to 52398 states and 93651 transitions. [2022-12-13 21:48:06,465 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 35437 [2022-12-13 21:48:06,491 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 35437 [2022-12-13 21:48:06,492 INFO L73 IsDeterministic]: Start isDeterministic. Operand 52398 states and 93651 transitions. [2022-12-13 21:48:06,493 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:48:06,493 INFO L218 hiAutomatonCegarLoop]: Abstraction has 52398 states and 93651 transitions. [2022-12-13 21:48:06,523 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52398 states and 93651 transitions. [2022-12-13 21:48:07,028 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52398 to 52398. [2022-12-13 21:48:07,062 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52398 states, 52398 states have (on average 1.7873010420245048) internal successors, (93651), 52397 states have internal predecessors, (93651), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:07,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52398 states to 52398 states and 93651 transitions. [2022-12-13 21:48:07,140 INFO L240 hiAutomatonCegarLoop]: Abstraction has 52398 states and 93651 transitions. [2022-12-13 21:48:07,140 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 21:48:07,141 INFO L428 stractBuchiCegarLoop]: Abstraction has 52398 states and 93651 transitions. [2022-12-13 21:48:07,141 INFO L335 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2022-12-13 21:48:07,141 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 52398 states and 93651 transitions. [2022-12-13 21:48:07,254 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 24677 [2022-12-13 21:48:07,254 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:48:07,254 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:48:07,257 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:07,257 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:07,257 INFO L748 eck$LassoCheckResult]: Stem: 1834172#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1834173#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1839054#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1838751#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1835431#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1835432#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1837110#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1837111#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1838436#L95 assume !(0 == getOrigin_~person#1); 1835466#L99 assume !(1 == getOrigin_~person#1); 1835467#L103 assume !(2 == getOrigin_~person#1); 1839611#L107 assume !(3 == getOrigin_~person#1); 1838957#L111 assume !(4 == getOrigin_~person#1); 1838264#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1838265#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1838401#L653 assume !(0 == initPersonOnFloor_~floor#1); 1838187#L680 assume 1 == initPersonOnFloor_~floor#1; 1835041#L681 assume !(0 == initPersonOnFloor_~person#1); 1835042#L684 assume !(1 == initPersonOnFloor_~person#1); 1839168#L687 assume !(2 == initPersonOnFloor_~person#1); 1838093#L690 assume !(3 == initPersonOnFloor_~person#1); 1838094#L693 assume !(4 == initPersonOnFloor_~person#1); 1837690#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1837691#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1834592#L445 assume !(0 == callOnFloor_~floorID#1); 1834593#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1838075#L457-2 assume { :end_inline_callOnFloor } true; 1836093#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1834847#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1834848#L382 assume !(0 == isFloorCalling_~floorID#1); 1835707#L386 assume !(1 == isFloorCalling_~floorID#1); 1835708#L390 assume !(2 == isFloorCalling_~floorID#1); 1837754#L394 assume !(3 == isFloorCalling_~floorID#1); 1838761#L398 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1838302#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1838303#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1835459#L2109 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1834972#L2083-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1834973#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1837196#L1389-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1836279#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1836705#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1834398#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1833834#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1833835#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1839397#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1835913#L382-3 assume !(0 == isFloorCalling_~floorID#1); 1835914#L386-3 assume !(1 == isFloorCalling_~floorID#1); 1837997#L390-3 assume !(2 == isFloorCalling_~floorID#1); 1834489#L394-3 assume !(3 == isFloorCalling_~floorID#1); 1834490#L398-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1836691#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1836031#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1836032#L1964 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret34#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret35#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1; 1837630#L1986 assume !(0 != ~floorButtons_0~0); 1834355#L1990 assume !(0 != ~floorButtons_1~0); 1833920#L1994 assume 0 != ~floorButtons_2~0;isAnyLiftButtonPressed_~retValue_acc~17#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~17#1; 1833921#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 1835589#L1930 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_#t~ret24#1, stopRequestedInDirection__wrappee__empty_#t~ret25#1, stopRequestedInDirection__wrappee__empty_#t~ret26#1, stopRequestedInDirection__wrappee__empty_#t~ret27#1, stopRequestedInDirection__wrappee__empty_#t~ret28#1, stopRequestedInDirection__wrappee__empty_#t~ret29#1, stopRequestedInDirection__wrappee__empty_#t~ret30#1, stopRequestedInDirection__wrappee__empty_#t~ret31#1, stopRequestedInDirection__wrappee__empty_#t~ret32#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~4#1, stopRequestedInDirection__wrappee__empty_~tmp___1~4#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1835679#L1576-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 1835090#L1745-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 1835091#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1; 1839922#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret39#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~16#1 := stopRequestedInDirection_#t~ret39#1;havoc stopRequestedInDirection_#t~ret39#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1839921#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1839920#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1838571#L2021 assume !(1 == ~currentHeading~0); 1838573#L2031 assume !(0 == ~currentFloorID~0); 1835356#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1837165#L2037-1 assume { :end_inline_continueInDirection } true; 1846424#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1846422#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1846407#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1846402#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1846401#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1840095#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1837946#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1833774#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1838130#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1839635#L3285-2 assume !false; 1840099#L3286 [2022-12-13 21:48:07,258 INFO L750 eck$LassoCheckResult]: Loop: 1840099#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1859076#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1859068#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 1859065#L3293 assume 1 != cleanup_~tmp___0~12#1; 1859063#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1859056#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1859044#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 1858989#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1858982#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1858981#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1858980#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1858979#L382-70 assume !(0 == isFloorCalling_~floorID#1); 1858978#L386-70 assume !(1 == isFloorCalling_~floorID#1); 1858977#L390-70 assume !(2 == isFloorCalling_~floorID#1); 1858976#L394-70 assume !(3 == isFloorCalling_~floorID#1); 1858975#L398-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1858974#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1858973#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1858972#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1856306#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1856308#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1856384#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1856263#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1856262#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1858929#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1858926#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1858924#L2263-2 assume !(0 != ~persons_0~0); 1858902#L2263-3 assume !(0 != ~persons_1~0); 1858864#L2277-1 assume !(0 != ~persons_2~0); 1858846#L2291-1 assume !(0 != ~persons_3~0); 1858835#L2305-1 assume !(0 != ~persons_4~0); 1858826#L2319-1 assume !(0 != ~persons_5~0); 1858824#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1858451#L473-12 assume 0 == isPersonOnFloor_~floor#1; 1858393#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1858379#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 1858377#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1858375#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1858373#L473-14 assume 0 == isPersonOnFloor_~floor#1; 1858374#L474-7 assume !(0 == isPersonOnFloor_~person#1); 1858335#L478-7 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1858331#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 1858329#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1858327#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1858319#L473-16 assume 0 == isPersonOnFloor_~floor#1; 1858317#L474-8 assume !(0 == isPersonOnFloor_~person#1); 1858303#L478-8 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1858283#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 1858281#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1858279#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1858278#L473-18 assume 0 == isPersonOnFloor_~floor#1; 1858275#L474-9 assume !(0 == isPersonOnFloor_~person#1); 1858256#L478-9 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1858245#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 1858243#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1858244#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1859274#L473-20 assume 0 == isPersonOnFloor_~floor#1; 1859275#L474-10 assume !(0 == isPersonOnFloor_~person#1); 1859245#L478-10 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1859244#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 1859242#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1859240#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 1859238#L473-22 assume 0 == isPersonOnFloor_~floor#1; 1859239#L474-11 assume !(0 == isPersonOnFloor_~person#1); 1859210#L478-11 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 1859193#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 1859191#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1859189#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1859188#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1859183#L429-41 assume { :end_inline_resetCallOnFloor } true; 1859182#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1859147#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1856752#L1355-5 assume { :end_inline_resetFloorButton } true; 1859137#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1859135#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1859133#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1859127#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1859125#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1859113#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1859104#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1859099#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 1859086#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1859085#L3285-2 assume !false; 1840099#L3286 [2022-12-13 21:48:07,258 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:07,258 INFO L85 PathProgramCache]: Analyzing trace with hash -357156768, now seen corresponding path program 1 times [2022-12-13 21:48:07,258 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:07,259 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2029759494] [2022-12-13 21:48:07,259 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:07,259 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:07,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:07,290 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:07,290 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:07,290 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2029759494] [2022-12-13 21:48:07,290 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2029759494] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:07,290 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:07,291 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 21:48:07,291 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [856897736] [2022-12-13 21:48:07,291 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:07,291 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:48:07,291 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:07,291 INFO L85 PathProgramCache]: Analyzing trace with hash -801924708, now seen corresponding path program 2 times [2022-12-13 21:48:07,292 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:07,292 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [68317035] [2022-12-13 21:48:07,292 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:07,292 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:07,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:07,317 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:07,317 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:07,317 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [68317035] [2022-12-13 21:48:07,317 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [68317035] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:07,317 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:07,317 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 21:48:07,318 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1072778017] [2022-12-13 21:48:07,318 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:07,318 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:48:07,318 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:48:07,318 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 21:48:07,318 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 21:48:07,318 INFO L87 Difference]: Start difference. First operand 52398 states and 93651 transitions. cyclomatic complexity: 41258 Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 2 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:07,743 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:48:07,744 INFO L93 Difference]: Finished difference Result 102754 states and 183284 transitions. [2022-12-13 21:48:07,744 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 102754 states and 183284 transitions. [2022-12-13 21:48:08,085 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 49272 [2022-12-13 21:48:08,332 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 102754 states to 102754 states and 183284 transitions. [2022-12-13 21:48:08,332 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 68882 [2022-12-13 21:48:08,376 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 68882 [2022-12-13 21:48:08,376 INFO L73 IsDeterministic]: Start isDeterministic. Operand 102754 states and 183284 transitions. [2022-12-13 21:48:08,377 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:48:08,377 INFO L218 hiAutomatonCegarLoop]: Abstraction has 102754 states and 183284 transitions. [2022-12-13 21:48:08,430 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 102754 states and 183284 transitions. [2022-12-13 21:48:09,096 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 102754 to 102754. [2022-12-13 21:48:09,166 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 102754 states, 102754 states have (on average 1.7837164489946864) internal successors, (183284), 102753 states have internal predecessors, (183284), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:09,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102754 states to 102754 states and 183284 transitions. [2022-12-13 21:48:09,324 INFO L240 hiAutomatonCegarLoop]: Abstraction has 102754 states and 183284 transitions. [2022-12-13 21:48:09,325 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 21:48:09,325 INFO L428 stractBuchiCegarLoop]: Abstraction has 102754 states and 183284 transitions. [2022-12-13 21:48:09,325 INFO L335 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2022-12-13 21:48:09,325 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 102754 states and 183284 transitions. [2022-12-13 21:48:09,564 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 49272 [2022-12-13 21:48:09,564 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:48:09,564 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:48:09,568 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:09,568 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:09,568 INFO L748 eck$LassoCheckResult]: Stem: 1989328#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1989329#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1994297#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1993996#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 1990598#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 1990599#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1992315#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 1992316#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1993671#L95 assume !(0 == getOrigin_~person#1); 1990634#L99 assume !(1 == getOrigin_~person#1); 1990635#L103 assume !(2 == getOrigin_~person#1); 1994859#L107 assume !(3 == getOrigin_~person#1); 1994201#L111 assume !(4 == getOrigin_~person#1); 1993500#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1993501#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1993637#L653 assume !(0 == initPersonOnFloor_~floor#1); 1993422#L680 assume 1 == initPersonOnFloor_~floor#1; 1990200#L681 assume !(0 == initPersonOnFloor_~person#1); 1990201#L684 assume !(1 == initPersonOnFloor_~person#1); 1994418#L687 assume !(2 == initPersonOnFloor_~person#1); 1993317#L690 assume !(3 == initPersonOnFloor_~person#1); 1993318#L693 assume !(4 == initPersonOnFloor_~person#1); 1992906#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1992907#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1989749#L445 assume !(0 == callOnFloor_~floorID#1); 1989750#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1993301#L457-2 assume { :end_inline_callOnFloor } true; 1991281#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1990006#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1990007#L382 assume !(0 == isFloorCalling_~floorID#1); 1990878#L386 assume !(1 == isFloorCalling_~floorID#1); 1990879#L390 assume !(2 == isFloorCalling_~floorID#1); 1992975#L394 assume !(3 == isFloorCalling_~floorID#1); 1994006#L398 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1993535#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1993536#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 1990626#L2109 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1990132#L2083-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1990133#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1992400#L1389-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1991472#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 1991894#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1989555#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 1988993#L2261 assume !(0 != timeShift_~tmp___9~2#1); 1988994#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 1994649#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1991094#L382-3 assume !(0 == isFloorCalling_~floorID#1); 1991095#L386-3 assume !(1 == isFloorCalling_~floorID#1); 1993222#L390-3 assume !(2 == isFloorCalling_~floorID#1); 1989646#L394-3 assume !(3 == isFloorCalling_~floorID#1); 1989647#L398-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1991879#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1991218#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 1991219#L1964 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret34#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret35#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1; 1992847#L1986 assume !(0 != ~floorButtons_0~0); 1989512#L1990 assume !(0 != ~floorButtons_1~0); 1989079#L1994 assume !(0 != ~floorButtons_2~0); 1989080#L1998 assume 0 != ~floorButtons_3~0;isAnyLiftButtonPressed_~retValue_acc~17#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~17#1; 1990759#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 1990760#L1930 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_#t~ret24#1, stopRequestedInDirection__wrappee__empty_#t~ret25#1, stopRequestedInDirection__wrappee__empty_#t~ret26#1, stopRequestedInDirection__wrappee__empty_#t~ret27#1, stopRequestedInDirection__wrappee__empty_#t~ret28#1, stopRequestedInDirection__wrappee__empty_#t~ret29#1, stopRequestedInDirection__wrappee__empty_#t~ret30#1, stopRequestedInDirection__wrappee__empty_#t~ret31#1, stopRequestedInDirection__wrappee__empty_#t~ret32#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~4#1, stopRequestedInDirection__wrappee__empty_~tmp___1~4#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1990850#L1576-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 1990251#L1745-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 1990252#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1; 1995188#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret39#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~16#1 := stopRequestedInDirection_#t~ret39#1;havoc stopRequestedInDirection_#t~ret39#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1995187#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 1995186#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1993808#L2021 assume !(1 == ~currentHeading~0); 1993810#L2031 assume !(0 == ~currentFloorID~0); 1990522#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1991441#L2037-1 assume { :end_inline_continueInDirection } true; 1991442#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1991344#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 1991345#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 1989532#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 1989533#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 1990645#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 1990646#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 1998060#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 2003249#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 2003246#L3285-2 assume !false; 2003247#L3286 [2022-12-13 21:48:09,569 INFO L750 eck$LassoCheckResult]: Loop: 2003247#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 2036394#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 2036380#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 2034123#L3293 assume 1 != cleanup_~tmp___0~12#1; 2034122#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2034116#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2034110#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 2034076#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 2034070#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 2034069#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 2034068#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2034067#L382-70 assume !(0 == isFloorCalling_~floorID#1); 2034066#L386-70 assume !(1 == isFloorCalling_~floorID#1); 2034065#L390-70 assume !(2 == isFloorCalling_~floorID#1); 2034064#L394-70 assume !(3 == isFloorCalling_~floorID#1); 2034063#L398-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2034062#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2034061#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 2034060#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 2034058#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 2034059#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 2034041#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 2034038#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 2034036#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2034035#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 2034028#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 2034025#L2263-2 assume !(0 != ~persons_0~0); 2033977#L2263-3 assume !(0 != ~persons_1~0); 2033972#L2277-1 assume !(0 != ~persons_2~0); 2033951#L2291-1 assume !(0 != ~persons_3~0); 2033949#L2305-1 assume !(0 != ~persons_4~0); 2033913#L2319-1 assume !(0 != ~persons_5~0); 2033912#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2033911#L473-12 assume 0 == isPersonOnFloor_~floor#1; 2033890#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2033877#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 2033875#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 2033876#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2034226#L473-14 assume 0 == isPersonOnFloor_~floor#1; 2034227#L474-7 assume !(0 == isPersonOnFloor_~person#1); 2033498#L478-7 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2033494#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 2033492#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 2033490#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2033488#L473-16 assume 0 == isPersonOnFloor_~floor#1; 2033487#L474-8 assume !(0 == isPersonOnFloor_~person#1); 2033479#L478-8 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2033455#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 2033452#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 2033449#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2033445#L473-18 assume 0 == isPersonOnFloor_~floor#1; 2033446#L474-9 assume !(0 == isPersonOnFloor_~person#1); 2033400#L478-9 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2033388#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 2033386#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 2033384#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2033382#L473-20 assume 0 == isPersonOnFloor_~floor#1; 2033383#L474-10 assume !(0 == isPersonOnFloor_~person#1); 2033304#L478-10 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2033302#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 2033300#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 2033298#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2033296#L473-22 assume 0 == isPersonOnFloor_~floor#1; 2033297#L474-11 assume !(0 == isPersonOnFloor_~person#1); 2033277#L478-11 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2033261#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 2033259#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 2033260#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 2037885#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 2037879#L429-41 assume { :end_inline_resetCallOnFloor } true; 2037869#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 2037845#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 2033142#L1355-5 assume { :end_inline_resetFloorButton } true; 2037819#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 2037816#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 2037805#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 2037796#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 2037794#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 2037786#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 2037777#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 2037565#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 2036406#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 2036404#L3285-2 assume !false; 2003247#L3286 [2022-12-13 21:48:09,569 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:09,569 INFO L85 PathProgramCache]: Analyzing trace with hash -1745463355, now seen corresponding path program 1 times [2022-12-13 21:48:09,569 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:09,569 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [115123924] [2022-12-13 21:48:09,569 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:09,569 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:09,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:09,608 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:09,608 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:09,608 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [115123924] [2022-12-13 21:48:09,608 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [115123924] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:09,608 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:09,609 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 21:48:09,609 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [151552886] [2022-12-13 21:48:09,609 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:09,609 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:48:09,609 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:09,609 INFO L85 PathProgramCache]: Analyzing trace with hash -801924708, now seen corresponding path program 3 times [2022-12-13 21:48:09,609 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:09,610 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1544235952] [2022-12-13 21:48:09,610 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:09,610 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:09,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:09,639 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:09,640 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:09,640 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1544235952] [2022-12-13 21:48:09,640 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1544235952] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:09,640 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:09,640 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 21:48:09,640 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1966754081] [2022-12-13 21:48:09,640 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:09,640 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:48:09,640 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:48:09,641 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 21:48:09,641 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 21:48:09,641 INFO L87 Difference]: Start difference. First operand 102754 states and 183284 transitions. cyclomatic complexity: 80535 Second operand has 3 states, 3 states have (on average 26.666666666666668) internal successors, (80), 2 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:10,358 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:48:10,358 INFO L93 Difference]: Finished difference Result 203074 states and 361489 transitions. [2022-12-13 21:48:10,358 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 203074 states and 361489 transitions. [2022-12-13 21:48:11,067 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 98503 [2022-12-13 21:48:11,576 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 203074 states to 203074 states and 361489 transitions. [2022-12-13 21:48:11,577 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 135355 [2022-12-13 21:48:11,667 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 135355 [2022-12-13 21:48:11,667 INFO L73 IsDeterministic]: Start isDeterministic. Operand 203074 states and 361489 transitions. [2022-12-13 21:48:11,668 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:48:11,668 INFO L218 hiAutomatonCegarLoop]: Abstraction has 203074 states and 361489 transitions. [2022-12-13 21:48:11,778 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 203074 states and 361489 transitions. [2022-12-13 21:48:13,194 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 203074 to 203074. [2022-12-13 21:48:13,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 203074 states, 203074 states have (on average 1.780085092133902) internal successors, (361489), 203073 states have internal predecessors, (361489), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:13,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 203074 states to 203074 states and 361489 transitions. [2022-12-13 21:48:13,764 INFO L240 hiAutomatonCegarLoop]: Abstraction has 203074 states and 361489 transitions. [2022-12-13 21:48:13,764 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 21:48:13,764 INFO L428 stractBuchiCegarLoop]: Abstraction has 203074 states and 361489 transitions. [2022-12-13 21:48:13,764 INFO L335 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2022-12-13 21:48:13,765 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 203074 states and 361489 transitions. [2022-12-13 21:48:14,274 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 98503 [2022-12-13 21:48:14,274 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:48:14,274 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:48:14,284 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:14,284 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:14,284 INFO L748 eck$LassoCheckResult]: Stem: 2295168#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2295169#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 2300157#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2299848#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 2296432#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 2296433#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 2298161#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 2298162#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 2299528#L95 assume !(0 == getOrigin_~person#1); 2296467#L99 assume !(1 == getOrigin_~person#1); 2296468#L103 assume !(2 == getOrigin_~person#1); 2300758#L107 assume !(3 == getOrigin_~person#1); 2300064#L111 assume !(4 == getOrigin_~person#1); 2299350#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 2299351#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2299489#L653 assume !(0 == initPersonOnFloor_~floor#1); 2299270#L680 assume 1 == initPersonOnFloor_~floor#1; 2296039#L681 assume !(0 == initPersonOnFloor_~person#1); 2296040#L684 assume !(1 == initPersonOnFloor_~person#1); 2300270#L687 assume !(2 == initPersonOnFloor_~person#1); 2299170#L690 assume !(3 == initPersonOnFloor_~person#1); 2299171#L693 assume !(4 == initPersonOnFloor_~person#1); 2298758#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 2298759#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2295591#L445 assume !(0 == callOnFloor_~floorID#1); 2295592#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 2299151#L457-2 assume { :end_inline_callOnFloor } true; 2297123#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 2295841#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2295842#L382 assume !(0 == isFloorCalling_~floorID#1); 2296723#L386 assume !(1 == isFloorCalling_~floorID#1); 2296724#L390 assume !(2 == isFloorCalling_~floorID#1); 2298827#L394 assume !(3 == isFloorCalling_~floorID#1); 2299860#L398 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2299388#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2299389#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 2296459#L2109 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 2295964#L2083-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 2295965#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 2298248#L1389-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 2297310#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 2297751#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2295395#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 2294828#L2261 assume !(0 != timeShift_~tmp___9~2#1); 2294829#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 2300515#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2296939#L382-3 assume !(0 == isFloorCalling_~floorID#1); 2296940#L386-3 assume !(1 == isFloorCalling_~floorID#1); 2299075#L390-3 assume !(2 == isFloorCalling_~floorID#1); 2295490#L394-3 assume !(3 == isFloorCalling_~floorID#1); 2295491#L398-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2297735#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2297056#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 2297057#L1964 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret34#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret35#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1; 2298698#L1986 assume !(0 != ~floorButtons_0~0); 2295348#L1990 assume !(0 != ~floorButtons_1~0); 2294914#L1994 assume !(0 != ~floorButtons_2~0); 2294915#L1998 assume !(0 != ~floorButtons_3~0); 2298802#L2002 assume 0 != ~floorButtons_4~0;isAnyLiftButtonPressed_~retValue_acc~17#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~17#1; 2296595#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 2296596#L1930 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_#t~ret24#1, stopRequestedInDirection__wrappee__empty_#t~ret25#1, stopRequestedInDirection__wrappee__empty_#t~ret26#1, stopRequestedInDirection__wrappee__empty_#t~ret27#1, stopRequestedInDirection__wrappee__empty_#t~ret28#1, stopRequestedInDirection__wrappee__empty_#t~ret29#1, stopRequestedInDirection__wrappee__empty_#t~ret30#1, stopRequestedInDirection__wrappee__empty_#t~ret31#1, stopRequestedInDirection__wrappee__empty_#t~ret32#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~4#1, stopRequestedInDirection__wrappee__empty_~tmp___1~4#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2296693#L1576-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 2296084#L1745-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 2296085#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1; 2301115#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret39#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~16#1 := stopRequestedInDirection_#t~ret39#1;havoc stopRequestedInDirection_#t~ret39#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 2301114#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 2301113#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 2301106#L2021 assume !(1 == ~currentHeading~0); 2301073#L2031 assume !(0 == ~currentFloorID~0); 2296357#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2297280#L2037-1 assume { :end_inline_continueInDirection } true; 2297281#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 2336780#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 2336778#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 2336772#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 2336771#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 2336764#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 2336767#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 2336756#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 2336754#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 2336620#L3285-2 assume !false; 2336621#L3286 [2022-12-13 21:48:14,285 INFO L750 eck$LassoCheckResult]: Loop: 2336621#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 2383944#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 2383943#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 2383942#L3293 assume 1 != cleanup_~tmp___0~12#1; 2383941#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2383935#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2383929#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 2383914#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 2383908#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 2383907#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 2383902#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2383900#L382-70 assume !(0 == isFloorCalling_~floorID#1); 2383899#L386-70 assume !(1 == isFloorCalling_~floorID#1); 2383898#L390-70 assume !(2 == isFloorCalling_~floorID#1); 2383897#L394-70 assume !(3 == isFloorCalling_~floorID#1); 2383896#L398-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2383895#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2383890#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 2383888#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 2383883#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 2383882#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 2383866#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 2383862#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 2383860#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2383859#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 2383851#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 2383848#L2263-2 assume !(0 != ~persons_0~0); 2383841#L2263-3 assume !(0 != ~persons_1~0); 2383834#L2277-1 assume !(0 != ~persons_2~0); 2383745#L2291-1 assume !(0 != ~persons_3~0); 2383743#L2305-1 assume !(0 != ~persons_4~0); 2383719#L2319-1 assume !(0 != ~persons_5~0); 2383718#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2383717#L473-12 assume 0 == isPersonOnFloor_~floor#1; 2383691#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2383677#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 2383674#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 2383671#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2383668#L473-14 assume 0 == isPersonOnFloor_~floor#1; 2383669#L474-7 assume !(0 == isPersonOnFloor_~person#1); 2383613#L478-7 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2383610#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 2383608#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 2383609#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2391920#L473-16 assume 0 == isPersonOnFloor_~floor#1; 2391917#L474-8 assume !(0 == isPersonOnFloor_~person#1); 2382047#L478-8 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2382027#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 2382025#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 2382017#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2382014#L473-18 assume 0 == isPersonOnFloor_~floor#1; 2382015#L474-9 assume !(0 == isPersonOnFloor_~person#1); 2381984#L478-9 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2381972#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 2381970#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 2381968#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2381966#L473-20 assume 0 == isPersonOnFloor_~floor#1; 2381967#L474-10 assume !(0 == isPersonOnFloor_~person#1); 2381854#L478-10 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2381852#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 2381850#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 2381848#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 2381846#L473-22 assume 0 == isPersonOnFloor_~floor#1; 2381847#L474-11 assume !(0 == isPersonOnFloor_~person#1); 2381827#L478-11 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 2381811#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 2381809#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 2381810#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 2383987#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 2383982#L429-41 assume { :end_inline_resetCallOnFloor } true; 2383980#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 2383976#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 2378404#L1355-5 assume { :end_inline_resetFloorButton } true; 2383970#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 2383969#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 2383968#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 2383963#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 2383971#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 2383960#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 2383951#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 2383947#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 2383946#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 2383945#L3285-2 assume !false; 2336621#L3286 [2022-12-13 21:48:14,285 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:14,285 INFO L85 PathProgramCache]: Analyzing trace with hash 95560517, now seen corresponding path program 1 times [2022-12-13 21:48:14,285 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:14,285 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [882332368] [2022-12-13 21:48:14,285 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:14,286 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:14,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:14,327 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:14,327 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:14,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [882332368] [2022-12-13 21:48:14,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [882332368] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:14,328 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:14,328 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 21:48:14,328 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [853405352] [2022-12-13 21:48:14,328 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:14,328 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:48:14,328 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:14,329 INFO L85 PathProgramCache]: Analyzing trace with hash -801924708, now seen corresponding path program 4 times [2022-12-13 21:48:14,329 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:14,329 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1494858273] [2022-12-13 21:48:14,329 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:14,329 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:14,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:14,350 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:14,350 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:14,350 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1494858273] [2022-12-13 21:48:14,350 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1494858273] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:14,351 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:14,351 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 21:48:14,351 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [665272868] [2022-12-13 21:48:14,351 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:14,351 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:48:14,351 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:48:14,351 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 21:48:14,351 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 21:48:14,352 INFO L87 Difference]: Start difference. First operand 203074 states and 361489 transitions. cyclomatic complexity: 158420 Second operand has 3 states, 3 states have (on average 27.0) internal successors, (81), 2 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:16,683 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:48:16,684 INFO L93 Difference]: Finished difference Result 402858 states and 715876 transitions. [2022-12-13 21:48:16,684 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 402858 states and 715876 transitions. [2022-12-13 21:48:18,270 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 197006 [2022-12-13 21:48:19,290 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 402858 states to 402858 states and 715876 transitions. [2022-12-13 21:48:19,290 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 267420 [2022-12-13 21:48:19,394 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 267420 [2022-12-13 21:48:19,394 INFO L73 IsDeterministic]: Start isDeterministic. Operand 402858 states and 715876 transitions. [2022-12-13 21:48:19,395 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:48:19,395 INFO L218 hiAutomatonCegarLoop]: Abstraction has 402858 states and 715876 transitions. [2022-12-13 21:48:19,580 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 402858 states and 715876 transitions. [2022-12-13 21:48:22,314 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 402858 to 402858. [2022-12-13 21:48:22,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 402858 states, 402858 states have (on average 1.7769933822835837) internal successors, (715876), 402857 states have internal predecessors, (715876), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:23,384 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 402858 states to 402858 states and 715876 transitions. [2022-12-13 21:48:23,384 INFO L240 hiAutomatonCegarLoop]: Abstraction has 402858 states and 715876 transitions. [2022-12-13 21:48:23,385 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 21:48:23,385 INFO L428 stractBuchiCegarLoop]: Abstraction has 402858 states and 715876 transitions. [2022-12-13 21:48:23,385 INFO L335 stractBuchiCegarLoop]: ======== Iteration 24 ============ [2022-12-13 21:48:23,385 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 402858 states and 715876 transitions. [2022-12-13 21:48:24,351 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 197006 [2022-12-13 21:48:24,351 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:48:24,351 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:48:24,361 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:24,361 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:24,361 INFO L748 eck$LassoCheckResult]: Stem: 2901103#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2901104#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 2906192#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2905849#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 2902386#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 2902387#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 2904119#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 2904120#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 2905502#L95 assume !(0 == getOrigin_~person#1); 2902422#L99 assume !(1 == getOrigin_~person#1); 2902423#L103 assume !(2 == getOrigin_~person#1); 2906855#L107 assume !(3 == getOrigin_~person#1); 2906072#L111 assume !(4 == getOrigin_~person#1); 2905320#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 2905321#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2905462#L653 assume !(0 == initPersonOnFloor_~floor#1); 2905241#L680 assume 1 == initPersonOnFloor_~floor#1; 2901982#L681 assume !(0 == initPersonOnFloor_~person#1); 2901983#L684 assume !(1 == initPersonOnFloor_~person#1); 2906309#L687 assume !(2 == initPersonOnFloor_~person#1); 2905140#L690 assume !(3 == initPersonOnFloor_~person#1); 2905141#L693 assume !(4 == initPersonOnFloor_~person#1); 2904716#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 2904717#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2901528#L445 assume !(0 == callOnFloor_~floorID#1); 2901529#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 2905125#L457-2 assume { :end_inline_callOnFloor } true; 2903078#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 2901785#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2901786#L382 assume !(0 == isFloorCalling_~floorID#1); 2902674#L386 assume !(1 == isFloorCalling_~floorID#1); 2902675#L390 assume !(2 == isFloorCalling_~floorID#1); 2904785#L394 assume !(3 == isFloorCalling_~floorID#1); 2905858#L398 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2905357#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2905358#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 2902413#L2109 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 2901910#L2083-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 2901911#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 2904207#L1389-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 2903264#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 2903704#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2901331#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 2900767#L2261 assume !(0 != timeShift_~tmp___9~2#1); 2900768#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 2906592#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2902888#L382-3 assume !(0 == isFloorCalling_~floorID#1); 2902889#L386-3 assume !(1 == isFloorCalling_~floorID#1); 2905045#L390-3 assume !(2 == isFloorCalling_~floorID#1); 2901423#L394-3 assume !(3 == isFloorCalling_~floorID#1); 2901424#L398-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2903690#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2903012#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 2903013#L1964 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret34#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret35#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1; 2904654#L1986 assume !(0 != ~floorButtons_0~0); 2901288#L1990 assume !(0 != ~floorButtons_1~0); 2900853#L1994 assume !(0 != ~floorButtons_2~0); 2900854#L1998 assume !(0 != ~floorButtons_3~0); 2904761#L2002 assume !(0 != ~floorButtons_4~0);isAnyLiftButtonPressed_~retValue_acc~17#1 := 0;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~17#1; 2902552#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 2902553#L1930 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_#t~ret24#1, stopRequestedInDirection__wrappee__empty_#t~ret25#1, stopRequestedInDirection__wrappee__empty_#t~ret26#1, stopRequestedInDirection__wrappee__empty_#t~ret27#1, stopRequestedInDirection__wrappee__empty_#t~ret28#1, stopRequestedInDirection__wrappee__empty_#t~ret29#1, stopRequestedInDirection__wrappee__empty_#t~ret30#1, stopRequestedInDirection__wrappee__empty_#t~ret31#1, stopRequestedInDirection__wrappee__empty_#t~ret32#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~4#1, stopRequestedInDirection__wrappee__empty_~tmp___1~4#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 2902646#L1576-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 2902034#L1745-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 2902035#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1; 2907179#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret39#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~16#1 := stopRequestedInDirection_#t~ret39#1;havoc stopRequestedInDirection_#t~ret39#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 2907170#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 2907163#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 2905653#L2021 assume !(1 == ~currentHeading~0); 2905655#L2031 assume !(0 == ~currentFloorID~0); 2902312#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2903232#L2037-1 assume { :end_inline_continueInDirection } true; 2903233#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 2903135#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 2903136#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 2901308#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 2901309#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 2902433#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 2902434#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 2900707#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 2905177#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 2906885#L3285-2 assume !false; 2917258#L3286 [2022-12-13 21:48:24,362 INFO L750 eck$LassoCheckResult]: Loop: 2917258#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 3068756#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 3068755#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 3068754#L3293 assume 1 != cleanup_~tmp___0~12#1; 3068753#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 3068752#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3068747#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 3068724#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 3068718#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 3068717#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 3068716#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 3068715#L382-70 assume !(0 == isFloorCalling_~floorID#1); 3068714#L386-70 assume !(1 == isFloorCalling_~floorID#1); 3068713#L390-70 assume !(2 == isFloorCalling_~floorID#1); 3068712#L394-70 assume !(3 == isFloorCalling_~floorID#1); 3068711#L398-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3068710#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 3068709#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 3068708#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 3068706#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 3068707#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 3068689#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 3068686#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 3068684#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 3068683#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 3068676#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 3068673#L2263-2 assume !(0 != ~persons_0~0); 3068625#L2263-3 assume !(0 != ~persons_1~0); 3068620#L2277-1 assume !(0 != ~persons_2~0); 3068599#L2291-1 assume !(0 != ~persons_3~0); 3068597#L2305-1 assume !(0 != ~persons_4~0); 3068561#L2319-1 assume !(0 != ~persons_5~0); 3068560#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 3068559#L473-12 assume 0 == isPersonOnFloor_~floor#1; 3068521#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 3068507#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 3068505#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 3068503#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 3068501#L473-14 assume 0 == isPersonOnFloor_~floor#1; 3068502#L474-7 assume !(0 == isPersonOnFloor_~person#1); 3067507#L478-7 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 3067503#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 3067501#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 3067499#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 3067497#L473-16 assume 0 == isPersonOnFloor_~floor#1; 3067498#L474-8 assume !(0 == isPersonOnFloor_~person#1); 3067472#L478-8 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 3067452#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 3067450#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 3067442#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 3067439#L473-18 assume 0 == isPersonOnFloor_~floor#1; 3067440#L474-9 assume !(0 == isPersonOnFloor_~person#1); 3067409#L478-9 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 3067397#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 3067395#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 3067393#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 3067391#L473-20 assume 0 == isPersonOnFloor_~floor#1; 3067392#L474-10 assume !(0 == isPersonOnFloor_~person#1); 3067280#L478-10 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 3067278#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 3067276#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 3067274#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 3067272#L473-22 assume 0 == isPersonOnFloor_~floor#1; 3067273#L474-11 assume !(0 == isPersonOnFloor_~person#1); 3067253#L478-11 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 3067237#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 3067235#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 3067236#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 3068801#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 3068795#L429-41 assume { :end_inline_resetCallOnFloor } true; 3068793#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 3068787#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 3057265#L1355-5 assume { :end_inline_resetFloorButton } true; 3068782#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 3068781#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 3068780#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 3068775#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 3068783#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 3068772#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 3068763#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 3068759#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 3068758#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 3068757#L3285-2 assume !false; 2917258#L3286 [2022-12-13 21:48:24,363 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:24,363 INFO L85 PathProgramCache]: Analyzing trace with hash -1709877817, now seen corresponding path program 1 times [2022-12-13 21:48:24,363 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:24,363 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1938462919] [2022-12-13 21:48:24,363 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:24,363 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:24,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:24,445 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:24,445 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:24,445 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1938462919] [2022-12-13 21:48:24,445 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1938462919] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:24,445 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:24,445 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 21:48:24,445 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [817418691] [2022-12-13 21:48:24,445 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:24,445 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:48:24,446 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:24,446 INFO L85 PathProgramCache]: Analyzing trace with hash -801924708, now seen corresponding path program 5 times [2022-12-13 21:48:24,446 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:24,446 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [702442520] [2022-12-13 21:48:24,446 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:24,446 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:24,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:24,478 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:24,478 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:24,478 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [702442520] [2022-12-13 21:48:24,478 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [702442520] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:24,478 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:24,478 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 21:48:24,478 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1621762294] [2022-12-13 21:48:24,479 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:24,479 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:48:24,479 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:48:24,479 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 21:48:24,479 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 21:48:24,480 INFO L87 Difference]: Start difference. First operand 402858 states and 715876 transitions. cyclomatic complexity: 313023 Second operand has 6 states, 6 states have (on average 13.5) internal successors, (81), 5 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:28,060 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:48:28,060 INFO L93 Difference]: Finished difference Result 978562 states and 1739534 transitions. [2022-12-13 21:48:28,060 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 978562 states and 1739534 transitions. [2022-12-13 21:48:31,631 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 514606 [2022-12-13 21:48:34,447 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 978562 states to 977666 states and 1737454 transitions. [2022-12-13 21:48:34,447 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 633658 [2022-12-13 21:48:34,728 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 633658 [2022-12-13 21:48:34,728 INFO L73 IsDeterministic]: Start isDeterministic. Operand 977666 states and 1737454 transitions. [2022-12-13 21:48:34,735 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:48:34,735 INFO L218 hiAutomatonCegarLoop]: Abstraction has 977666 states and 1737454 transitions. [2022-12-13 21:48:35,223 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 977666 states and 1737454 transitions. [2022-12-13 21:48:40,552 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 977666 to 564203. [2022-12-13 21:48:40,813 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 564203 states, 564203 states have (on average 1.7656464074100988) internal successors, (996183), 564202 states have internal predecessors, (996183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:42,093 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 564203 states to 564203 states and 996183 transitions. [2022-12-13 21:48:42,093 INFO L240 hiAutomatonCegarLoop]: Abstraction has 564203 states and 996183 transitions. [2022-12-13 21:48:42,094 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-13 21:48:42,094 INFO L428 stractBuchiCegarLoop]: Abstraction has 564203 states and 996183 transitions. [2022-12-13 21:48:42,094 INFO L335 stractBuchiCegarLoop]: ======== Iteration 25 ============ [2022-12-13 21:48:42,094 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 564203 states and 996183 transitions. [2022-12-13 21:48:43,412 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 252954 [2022-12-13 21:48:43,413 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 21:48:43,413 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 21:48:43,560 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:43,560 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:48:43,560 INFO L748 eck$LassoCheckResult]: Stem: 4282517#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 4282518#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret137#1, main_~retValue_acc~31#1, main_~tmp~29#1;havoc main_~retValue_acc~31#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 4287475#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 4287143#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 4283748#valid_product_returnLabel#1 main_#t~ret137#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret137#1;havoc main_#t~ret137#1; 4283749#L3478 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 4285431#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification9_spec__1 } true;~floorButtons_spc9_0~0 := 0;~floorButtons_spc9_1~0 := 0;~floorButtons_spc9_2~0 := 0;~floorButtons_spc9_3~0 := 0;~floorButtons_spc9_4~0 := 0; 4285432#__utac_acc__Specification9_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification9_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret130#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 4286809#L95 assume !(0 == getOrigin_~person#1); 4283783#L99 assume !(1 == getOrigin_~person#1); 4283784#L103 assume !(2 == getOrigin_~person#1); 4288104#L107 assume !(3 == getOrigin_~person#1); 4287366#L111 assume !(4 == getOrigin_~person#1); 4286629#L115 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 4286630#getOrigin_returnLabel#1 bigMacCall_#t~ret130#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret130#1;havoc bigMacCall_#t~ret130#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4286771#L653 assume !(0 == initPersonOnFloor_~floor#1); 4286545#L680 assume 1 == initPersonOnFloor_~floor#1; 4283370#L681 assume !(0 == initPersonOnFloor_~person#1); 4283371#L684 assume !(1 == initPersonOnFloor_~person#1); 4287604#L687 assume !(2 == initPersonOnFloor_~person#1); 4286441#L690 assume !(3 == initPersonOnFloor_~person#1); 4286442#L693 assume !(4 == initPersonOnFloor_~person#1); 4286020#L696 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 4286021#L761-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 4282924#L445 assume !(0 == callOnFloor_~floorID#1); 4282925#L448 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 4286425#L457-2 assume { :end_inline_callOnFloor } true; 4284413#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 4283175#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret131#1, cleanup_#t~ret132#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 4283176#L382 assume !(0 == isFloorCalling_~floorID#1); 4284027#L386 assume !(1 == isFloorCalling_~floorID#1); 4284028#L390 assume !(2 == isFloorCalling_~floorID#1); 4286092#L394 assume !(3 == isFloorCalling_~floorID#1); 4287154#L398 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 4286666#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 4286667#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 4283775#L2109 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 4283298#L2083-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 4283299#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 4285518#L1389-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 4284594#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 4285025#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 4282733#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 4282201#L2261 assume !(0 != timeShift_~tmp___9~2#1); 4282202#L2352 assume 1 == ~doorState~0;~doorState~0 := 0; 4287869#L2352-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~1#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 4284242#L382-3 assume !(0 == isFloorCalling_~floorID#1); 4284243#L386-3 assume !(1 == isFloorCalling_~floorID#1); 4286349#L390-3 assume !(2 == isFloorCalling_~floorID#1); 4282823#L394-3 assume !(3 == isFloorCalling_~floorID#1); 4282824#L398-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 4285008#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 4284350#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret37#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret37#1;havoc stopRequestedInDirection_#t~ret37#1; 4284351#L1964 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret34#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret35#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~0#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1;havoc isAnyLiftButtonPressed_~retValue_acc~17#1; 4285956#L1986 assume !(0 != ~floorButtons_0~0); 4282687#L1990 assume !(0 != ~floorButtons_1~0); 4282274#L1994 assume !(0 != ~floorButtons_2~0); 4282275#L1998 assume !(0 != ~floorButtons_3~0); 4286066#L2002 assume !(0 != ~floorButtons_4~0);isAnyLiftButtonPressed_~retValue_acc~17#1 := 0;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~17#1; 4283906#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret33#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 4283907#L1930 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_#t~ret24#1, stopRequestedInDirection__wrappee__empty_#t~ret25#1, stopRequestedInDirection__wrappee__empty_#t~ret26#1, stopRequestedInDirection__wrappee__empty_#t~ret27#1, stopRequestedInDirection__wrappee__empty_#t~ret28#1, stopRequestedInDirection__wrappee__empty_#t~ret29#1, stopRequestedInDirection__wrappee__empty_#t~ret30#1, stopRequestedInDirection__wrappee__empty_#t~ret31#1, stopRequestedInDirection__wrappee__empty_#t~ret32#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~4#1, stopRequestedInDirection__wrappee__empty_~tmp___1~4#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 4283997#L1576-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 4283998#isTopFloor_returnLabel#3 stopRequestedInDirection__wrappee__empty_#t~ret22#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~8#1 := stopRequestedInDirection__wrappee__empty_#t~ret22#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret22#1; 4287046#L1580-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~8#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 4287080#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~15#1; 4283382#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret39#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~16#1 := stopRequestedInDirection_#t~ret39#1;havoc stopRequestedInDirection_#t~ret39#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 4285588#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret69#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret69#1;havoc timeShift_#t~ret69#1; 4285589#L2360 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret40#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 4286317#L2021 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 4286954#isTopFloor_returnLabel#4 continueInDirection_#t~ret40#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret40#1;havoc continueInDirection_#t~ret40#1; 4285525#L2025 assume !(0 != continueInDirection_~tmp~11#1); 4285488#L2031-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4284565#L2037-1 assume { :end_inline_continueInDirection } true; 4284566#L2369-2 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 4311813#getCurrentFloorID_returnLabel#6 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 4311812#L1432-6 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 4299033#isEmpty_returnLabel#7 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 4312000#L1021 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 4294495#areDoorsOpen_returnLabel#1 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 4294498#L1031 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 4294475#L1031-1 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 4294473#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 4294469#L3285-2 assume !false; 4294470#L3286 [2022-12-13 21:48:43,560 INFO L750 eck$LassoCheckResult]: Loop: 4294470#L3286 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 4710280#L3289 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 4710279#isBlocked_returnLabel#1 cleanup_#t~ret131#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret131#1;havoc cleanup_#t~ret131#1; 4710278#L3293 assume 1 != cleanup_~tmp___0~12#1; 4710277#L3293-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret21#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_#t~ret19#1, anyStopRequested_#t~ret20#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 4710276#L382-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 4710267#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret16#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret16#1;havoc anyStopRequested_#t~ret16#1; 4710262#L1480 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 4286739#anyStopRequested_returnLabel#1 isIdle_#t~ret21#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret21#1;havoc isIdle_#t~ret21#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 4710258#isIdle_returnLabel#1 cleanup_#t~ret132#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 4710257#L3305 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_~tmp~16#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1, stopRequestedAtCurrentFloor_#t~ret47#1, stopRequestedAtCurrentFloor_#t~ret48#1, stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret99#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 4710256#L382-70 assume !(0 == isFloorCalling_~floorID#1); 4710255#L386-70 assume !(1 == isFloorCalling_~floorID#1); 4710254#L390-70 assume !(2 == isFloorCalling_~floorID#1); 4710253#L394-70 assume !(3 == isFloorCalling_~floorID#1); 4710252#L398-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 4710251#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret99#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret99#1;havoc isExecutiveFloorCalling_#t~ret99#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 4710250#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret46#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret46#1;havoc stopRequestedAtCurrentFloor_#t~ret46#1; 4710249#L2109-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret45#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 4710247#L2083-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 4710248#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret43#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 4710230#L1389-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 4710227#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret44#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~19#1; 4710225#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret49#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 4710224#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret62#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret62#1;havoc timeShift_#t~ret62#1; 4710217#L2261-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 4710214#L2263-2 assume !(0 != ~persons_0~0); 4710168#L2263-3 assume !(0 != ~persons_1~0); 4710163#L2277-1 assume !(0 != ~persons_2~0); 4710144#L2291-1 assume !(0 != ~persons_3~0); 4710142#L2305-1 assume !(0 != ~persons_4~0); 4709610#L2319-1 assume !(0 != ~persons_5~0); 4709608#L2333-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_#t~ret58#1, processWaitingOnFloor_#t~ret59#1, processWaitingOnFloor_#t~ret60#1, processWaitingOnFloor_#t~ret61#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~5#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~5#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 4623144#L473-12 assume 0 == isPersonOnFloor_~floor#1; 4623079#L474-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 4623065#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 4623063#L2163-3 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 4623061#L2163-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 4623059#L473-14 assume 0 == isPersonOnFloor_~floor#1; 4623060#L474-7 assume !(0 == isPersonOnFloor_~person#1); 4623027#L478-7 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 4623024#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 4623022#L2176-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 4623023#L2176-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 4639318#L473-16 assume 0 == isPersonOnFloor_~floor#1; 4639319#L474-8 assume !(0 == isPersonOnFloor_~person#1); 4639289#L478-8 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 4639269#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 4639268#L2189-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 4639266#L2189-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 4639264#L473-18 assume 0 == isPersonOnFloor_~floor#1; 4639265#L474-9 assume !(0 == isPersonOnFloor_~person#1); 4639240#L478-9 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 4639229#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 4639227#L2202-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 4639228#L2202-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 4643190#L473-20 assume 0 == isPersonOnFloor_~floor#1; 4643191#L474-10 assume !(0 == isPersonOnFloor_~person#1); 4643156#L478-10 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 4643155#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret58#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret58#1;havoc processWaitingOnFloor_#t~ret58#1; 4643148#L2215-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 4643149#L2215-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~4#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~4#1; 4622802#L473-22 assume 0 == isPersonOnFloor_~floor#1; 4622803#L474-11 assume !(0 == isPersonOnFloor_~person#1); 4622773#L478-11 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~4#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; 4622757#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret60#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret60#1;havoc processWaitingOnFloor_#t~ret60#1; 4622755#L2228-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 4622756#L2228-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 4710323#L417-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 4710317#L429-41 assume { :end_inline_resetCallOnFloor } true; 4710316#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 4710312#L1343-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 4618755#L1355-5 assume { :end_inline_resetFloorButton } true; 4710306#L2369-5 assume { :begin_inline___utac_acc__Specification9_spec__3 } true;havoc __utac_acc__Specification9_spec__3_#t~ret10#1, __utac_acc__Specification9_spec__3_#t~ret11#1, __utac_acc__Specification9_spec__3_#t~ret12#1, __utac_acc__Specification9_spec__3_~floor~0#1, __utac_acc__Specification9_spec__3_~tmp~2#1, __utac_acc__Specification9_spec__3_~tmp___0~2#1, __utac_acc__Specification9_spec__3_~tmp___1~2#1;havoc __utac_acc__Specification9_spec__3_~floor~0#1;havoc __utac_acc__Specification9_spec__3_~tmp~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification9_spec__3_~tmp___1~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 4710305#getCurrentFloorID_returnLabel#12 __utac_acc__Specification9_spec__3_#t~ret10#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification9_spec__3_~tmp~2#1 := __utac_acc__Specification9_spec__3_#t~ret10#1;havoc __utac_acc__Specification9_spec__3_#t~ret10#1;__utac_acc__Specification9_spec__3_~floor~0#1 := __utac_acc__Specification9_spec__3_~tmp~2#1;assume { :begin_inline_isEmpty } true;havoc isEmpty_#res#1;havoc isEmpty_~retValue_acc~11#1;havoc isEmpty_~retValue_acc~11#1; 4710304#L1432-13 assume 1 == ~persons_0~0;isEmpty_~retValue_acc~11#1 := 0;isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; 4710299#isEmpty_returnLabel#14 __utac_acc__Specification9_spec__3_#t~ret11#1 := isEmpty_#res#1;assume { :end_inline_isEmpty } true;__utac_acc__Specification9_spec__3_~tmp___1~2#1 := __utac_acc__Specification9_spec__3_#t~ret11#1;havoc __utac_acc__Specification9_spec__3_#t~ret11#1; 4710307#L1021-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___1~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~8#1;havoc areDoorsOpen_~retValue_acc~8#1;areDoorsOpen_~retValue_acc~8#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~8#1; 4710296#areDoorsOpen_returnLabel#2 __utac_acc__Specification9_spec__3_#t~ret12#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification9_spec__3_~tmp___0~2#1 := __utac_acc__Specification9_spec__3_#t~ret12#1;havoc __utac_acc__Specification9_spec__3_#t~ret12#1; 4710287#L1031-2 assume !(0 != __utac_acc__Specification9_spec__3_~tmp___0~2#1); 4710283#L1031-3 assume { :end_inline___utac_acc__Specification9_spec__3 } true; 4710282#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 4710281#L3285-2 assume !false; 4294470#L3286 [2022-12-13 21:48:43,561 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:43,561 INFO L85 PathProgramCache]: Analyzing trace with hash 1022513181, now seen corresponding path program 1 times [2022-12-13 21:48:43,561 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:43,561 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1065683167] [2022-12-13 21:48:43,561 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:43,561 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:43,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:43,640 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:43,640 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:43,640 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1065683167] [2022-12-13 21:48:43,640 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1065683167] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:43,640 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:43,640 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 21:48:43,641 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1570362819] [2022-12-13 21:48:43,641 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:43,641 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 21:48:43,641 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:48:43,641 INFO L85 PathProgramCache]: Analyzing trace with hash -801924708, now seen corresponding path program 6 times [2022-12-13 21:48:43,641 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:48:43,642 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [746516591] [2022-12-13 21:48:43,642 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:48:43,642 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:48:43,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:48:43,674 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:48:43,674 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:48:43,675 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [746516591] [2022-12-13 21:48:43,675 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [746516591] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:48:43,675 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:48:43,675 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 21:48:43,675 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [149143587] [2022-12-13 21:48:43,675 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:48:43,675 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 21:48:43,675 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:48:43,676 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 21:48:43,676 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 21:48:43,676 INFO L87 Difference]: Start difference. First operand 564203 states and 996183 transitions. cyclomatic complexity: 431987 Second operand has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:48:47,281 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:48:47,282 INFO L93 Difference]: Finished difference Result 1041780 states and 1828446 transitions. [2022-12-13 21:48:47,282 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 1041780 states and 1828446 transitions. [2022-12-13 21:48:51,348 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 456148 [2022-12-13 21:48:54,165 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 1041780 states to 1041780 states and 1828446 transitions. [2022-12-13 21:48:54,165 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 675184 [2022-12-13 21:48:54,506 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 675184 [2022-12-13 21:48:54,506 INFO L73 IsDeterministic]: Start isDeterministic. Operand 1041780 states and 1828446 transitions. [2022-12-13 21:48:54,507 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 21:48:54,507 INFO L218 hiAutomatonCegarLoop]: Abstraction has 1041780 states and 1828446 transitions. [2022-12-13 21:48:55,252 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1041780 states and 1828446 transitions. [2022-12-13 21:49:00,880 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1041780 to 560123. [2022-12-13 21:49:01,150 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 560123 states, 560123 states have (on average 1.759083272781157) internal successors, (985303), 560122 states have internal predecessors, (985303), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:49:02,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 560123 states to 560123 states and 985303 transitions. [2022-12-13 21:49:02,501 INFO L240 hiAutomatonCegarLoop]: Abstraction has 560123 states and 985303 transitions. [2022-12-13 21:49:02,502 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 21:49:02,503 INFO L428 stractBuchiCegarLoop]: Abstraction has 560123 states and 985303 transitions. [2022-12-13 21:49:02,503 INFO L335 stractBuchiCegarLoop]: ======== Iteration 26 ============ [2022-12-13 21:49:02,503 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 560123 states and 985303 transitions.