./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec1_product31.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec1_product31.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 04ae9a4eaad9b026cab167b9d875c53fcb305c3c3f2af8aa4a0b048c8b5ef4cb --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-28 23:55:29,270 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-28 23:55:29,338 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Termination-32bit-Automizer_Default.epf [2023-11-28 23:55:29,342 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-28 23:55:29,343 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-28 23:55:29,380 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-28 23:55:29,380 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-28 23:55:29,381 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-28 23:55:29,382 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-28 23:55:29,382 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-28 23:55:29,383 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-28 23:55:29,383 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-28 23:55:29,384 INFO L153 SettingsManager]: * Use SBE=true [2023-11-28 23:55:29,384 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2023-11-28 23:55:29,385 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2023-11-28 23:55:29,385 INFO L153 SettingsManager]: * Use old map elimination=false [2023-11-28 23:55:29,386 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2023-11-28 23:55:29,386 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2023-11-28 23:55:29,387 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2023-11-28 23:55:29,387 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-28 23:55:29,387 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2023-11-28 23:55:29,388 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-28 23:55:29,388 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-28 23:55:29,406 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-28 23:55:29,406 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-28 23:55:29,407 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2023-11-28 23:55:29,407 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2023-11-28 23:55:29,408 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2023-11-28 23:55:29,408 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2023-11-28 23:55:29,409 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-28 23:55:29,409 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-28 23:55:29,409 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2023-11-28 23:55:29,410 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-28 23:55:29,410 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-28 23:55:29,411 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-28 23:55:29,411 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-28 23:55:29,411 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-28 23:55:29,412 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2023-11-28 23:55:29,412 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 04ae9a4eaad9b026cab167b9d875c53fcb305c3c3f2af8aa4a0b048c8b5ef4cb [2023-11-28 23:55:29,619 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-28 23:55:29,642 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-28 23:55:29,644 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-28 23:55:29,646 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-28 23:55:29,646 INFO L274 PluginConnector]: CDTParser initialized [2023-11-28 23:55:29,647 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/elevator_spec1_product31.cil.c [2023-11-28 23:55:32,352 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-28 23:55:32,656 INFO L384 CDTParser]: Found 1 translation units. [2023-11-28 23:55:32,657 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/sv-benchmarks/c/product-lines/elevator_spec1_product31.cil.c [2023-11-28 23:55:32,679 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/data/6b13b85c0/af64dfec56cf42d884d6cda0fe63ff03/FLAGfc46d2c60 [2023-11-28 23:55:32,693 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/data/6b13b85c0/af64dfec56cf42d884d6cda0fe63ff03 [2023-11-28 23:55:32,695 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-28 23:55:32,697 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-28 23:55:32,698 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-28 23:55:32,698 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-28 23:55:32,704 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-28 23:55:32,704 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 11:55:32" (1/1) ... [2023-11-28 23:55:32,705 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5d420c0b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:55:32, skipping insertion in model container [2023-11-28 23:55:32,706 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 11:55:32" (1/1) ... [2023-11-28 23:55:32,781 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-28 23:55:33,215 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-28 23:55:33,232 INFO L202 MainTranslator]: Completed pre-run [2023-11-28 23:55:33,242 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [48] [2023-11-28 23:55:33,244 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [414] [2023-11-28 23:55:33,244 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [423] [2023-11-28 23:55:33,245 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [2054] [2023-11-28 23:55:33,245 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [2148] [2023-11-28 23:55:33,245 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [2164] [2023-11-28 23:55:33,245 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [2282] [2023-11-28 23:55:33,246 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [2463] [2023-11-28 23:55:33,246 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [2816] [2023-11-28 23:55:33,246 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [3481] [2023-11-28 23:55:33,334 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-28 23:55:33,366 INFO L206 MainTranslator]: Completed translation [2023-11-28 23:55:33,367 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:55:33 WrapperNode [2023-11-28 23:55:33,367 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-28 23:55:33,368 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-28 23:55:33,368 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-28 23:55:33,369 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-28 23:55:33,376 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:55:33" (1/1) ... [2023-11-28 23:55:33,404 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:55:33" (1/1) ... [2023-11-28 23:55:33,654 INFO L138 Inliner]: procedures = 97, calls = 351, calls flagged for inlining = 204, calls inlined = 445, statements flattened = 14241 [2023-11-28 23:55:33,655 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-28 23:55:33,655 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-28 23:55:33,655 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-28 23:55:33,656 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-28 23:55:33,664 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:55:33" (1/1) ... [2023-11-28 23:55:33,665 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:55:33" (1/1) ... [2023-11-28 23:55:33,681 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:55:33" (1/1) ... [2023-11-28 23:55:33,739 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2023-11-28 23:55:33,739 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:55:33" (1/1) ... [2023-11-28 23:55:33,740 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:55:33" (1/1) ... [2023-11-28 23:55:33,796 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:55:33" (1/1) ... [2023-11-28 23:55:33,862 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:55:33" (1/1) ... [2023-11-28 23:55:33,887 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:55:33" (1/1) ... [2023-11-28 23:55:33,907 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:55:33" (1/1) ... [2023-11-28 23:55:33,940 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-28 23:55:33,940 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-28 23:55:33,941 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-28 23:55:33,941 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-28 23:55:33,941 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:55:33" (1/1) ... [2023-11-28 23:55:33,946 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:33,955 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:33,966 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:34,028 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2023-11-28 23:55:34,054 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-28 23:55:34,054 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-28 23:55:34,054 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2023-11-28 23:55:34,055 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2023-11-28 23:55:34,055 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2023-11-28 23:55:34,055 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2023-11-28 23:55:34,055 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2023-11-28 23:55:34,055 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2023-11-28 23:55:34,055 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2023-11-28 23:55:34,056 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2023-11-28 23:55:34,056 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2023-11-28 23:55:34,056 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2023-11-28 23:55:34,056 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2023-11-28 23:55:34,056 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2023-11-28 23:55:34,057 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2023-11-28 23:55:34,057 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2023-11-28 23:55:34,057 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2023-11-28 23:55:34,057 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2023-11-28 23:55:34,057 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2023-11-28 23:55:34,058 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2023-11-28 23:55:34,058 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2023-11-28 23:55:34,058 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-28 23:55:34,058 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-28 23:55:34,248 INFO L241 CfgBuilder]: Building ICFG [2023-11-28 23:55:34,250 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-28 23:55:39,706 INFO L282 CfgBuilder]: Performing block encoding [2023-11-28 23:55:39,756 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-28 23:55:39,756 INFO L309 CfgBuilder]: Removed 1 assume(true) statements. [2023-11-28 23:55:39,760 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 11:55:39 BoogieIcfgContainer [2023-11-28 23:55:39,760 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-28 23:55:39,761 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2023-11-28 23:55:39,761 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2023-11-28 23:55:39,765 INFO L274 PluginConnector]: BuchiAutomizer initialized [2023-11-28 23:55:39,766 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2023-11-28 23:55:39,766 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 28.11 11:55:32" (1/3) ... [2023-11-28 23:55:39,767 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6b79b27c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 28.11 11:55:39, skipping insertion in model container [2023-11-28 23:55:39,767 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2023-11-28 23:55:39,767 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:55:33" (2/3) ... [2023-11-28 23:55:39,767 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6b79b27c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 28.11 11:55:39, skipping insertion in model container [2023-11-28 23:55:39,768 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2023-11-28 23:55:39,768 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 11:55:39" (3/3) ... [2023-11-28 23:55:39,769 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec1_product31.cil.c [2023-11-28 23:55:39,885 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2023-11-28 23:55:39,885 INFO L304 stractBuchiCegarLoop]: Hoare is false [2023-11-28 23:55:39,885 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2023-11-28 23:55:39,885 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2023-11-28 23:55:39,885 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2023-11-28 23:55:39,885 INFO L308 stractBuchiCegarLoop]: Difference is false [2023-11-28 23:55:39,885 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2023-11-28 23:55:39,885 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2023-11-28 23:55:39,903 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3739 states, 3738 states have (on average 1.8667736757624398) internal successors, (6978), 3738 states have internal predecessors, (6978), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:55:40,012 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1819 [2023-11-28 23:55:40,012 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:55:40,012 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:55:40,031 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:55:40,032 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:55:40,032 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2023-11-28 23:55:40,042 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3739 states, 3738 states have (on average 1.8667736757624398) internal successors, (6978), 3738 states have internal predecessors, (6978), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:55:40,099 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1819 [2023-11-28 23:55:40,099 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:55:40,099 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:55:40,106 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:55:40,106 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:55:40,115 INFO L748 eck$LassoCheckResult]: Stem: 126#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3643#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 2587#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2304#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 534#valid_product_returnLabel#1true main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 3085#L2803true assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1212#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 3336#__utac_acc__Specification1_spec__1_returnLabel#1true assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 3646#L2208true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 2014#getOrigin_returnLabel#1true bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 921#L3174true assume 0 == initPersonOnFloor_~floor#1; 2915#L3175true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2351#L3282-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2802#L2304true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 559#L2316-2true havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1544#L2966true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 503#L2978-2true havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 782#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 316#bigMacCall_returnLabel#1true havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 233#L2208-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 298#getOrigin_returnLabel#2true angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 205#L3174-1true assume 0 == initPersonOnFloor_~floor#1; 960#L3175-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1478#L3282-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 602#L2304-2true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 2623#L2316-5true havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 788#L2966-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 3680#L2978-5true havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 2659#initPersonOnFloor_returnLabel#2true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 2440#angelinaCall_returnLabel#1true havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3369#L2899true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1952#isFloorCalling_returnLabel#1true isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 3170#isExecutiveFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 301#L1425true assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 2713#getCurrentFloorID_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 3158#L1429true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 198#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 2625#L1578true assume !(0 != timeShift_~tmp___9~2#1); 757#L1669true assume !(1 == ~doorState~0); 3043#L1669-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 746#L2899-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2181#isFloorCalling_returnLabel#4true isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 769#isExecutiveFloorCalling_returnLabel#2true stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 2517#L1280true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 3577#getCurrentFloorID_returnLabel#4true stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 1294#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 1717#L1677true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 3351#L1337true assume !(1 == ~currentHeading~0); 630#L1347true assume !(0 == ~currentFloorID~0); 498#L1347-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3489#L1353-1true havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1024#L1686-2true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 815#getCurrentFloorID_returnLabel#6true __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 3413#L2342true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 3108#L2343true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 555#areDoorsOpen_returnLabel#1true __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 1734#L2347true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 657#L2402true havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 3431#timeShift_returnLabel#1true havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 2760#L2607-2true [2023-11-28 23:55:40,117 INFO L750 eck$LassoCheckResult]: Loop: 2760#L2607-2true assume !false; 697#L2608true cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 443#L2611true assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 2579#isBlocked_returnLabel#1true cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 3275#L2615true assume 1 != cleanup_~tmp___0~12#1; 2476#L2615-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2715#L2899-65true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1970#isFloorCalling_returnLabel#66true anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 289#L796true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 103#anyStopRequested_returnLabel#1true isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 865#isIdle_returnLabel#1true cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 199#L2627true assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2212#L2899-70true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2612#isFloorCalling_returnLabel#71true isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1138#isExecutiveFloorCalling_returnLabel#4true stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 718#L1425-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 922#getCurrentFloorID_returnLabel#7true stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 661#L1429-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1599#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 318#L1578-2true assume !(0 != timeShift_~tmp___9~2#1); 3245#L1669-3true assume 1 == ~doorState~0;~doorState~0 := 0; 2210#L1669-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3063#L2899-73true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2583#isFloorCalling_returnLabel#74true isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 80#isExecutiveFloorCalling_returnLabel#5true stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 2087#L1280-2true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 3631#getCurrentFloorID_returnLabel#10true stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 912#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 2598#L1677-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1979#L1337-3true assume !(1 == ~currentHeading~0); 1865#L1347-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3561#L1347-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 887#L1353-7true havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 2108#L1686-5true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 2775#getCurrentFloorID_returnLabel#12true __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 2699#L2342-1true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 3513#L2343-1true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1091#areDoorsOpen_returnLabel#6true __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 3317#L2347-2true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 3396#L2402-1true havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1576#timeShift_returnLabel#2true havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 2760#L2607-2true [2023-11-28 23:55:40,146 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:55:40,147 INFO L85 PathProgramCache]: Analyzing trace with hash -424054295, now seen corresponding path program 1 times [2023-11-28 23:55:40,156 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:55:40,157 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [728783782] [2023-11-28 23:55:40,157 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:55:40,157 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:55:40,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:55:40,529 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:55:40,530 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:55:40,530 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [728783782] [2023-11-28 23:55:40,531 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [728783782] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:55:40,531 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:55:40,532 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-28 23:55:40,533 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [730890137] [2023-11-28 23:55:40,534 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:55:40,539 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:55:40,540 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:55:40,540 INFO L85 PathProgramCache]: Analyzing trace with hash -1846431016, now seen corresponding path program 1 times [2023-11-28 23:55:40,540 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:55:40,541 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1430388904] [2023-11-28 23:55:40,541 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:55:40,541 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:55:40,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:55:40,694 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:55:40,694 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:55:40,695 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1430388904] [2023-11-28 23:55:40,695 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1430388904] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:55:40,695 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:55:40,696 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-28 23:55:40,696 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1566332480] [2023-11-28 23:55:40,696 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:55:40,697 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:55:40,698 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:55:40,735 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-28 23:55:40,735 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-28 23:55:40,748 INFO L87 Difference]: Start difference. First operand has 3739 states, 3738 states have (on average 1.8667736757624398) internal successors, (6978), 3738 states have internal predecessors, (6978), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 7 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:55:46,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:55:46,608 INFO L93 Difference]: Finished difference Result 14866 states and 27383 transitions. [2023-11-28 23:55:46,609 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14866 states and 27383 transitions. [2023-11-28 23:55:46,784 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 5373 [2023-11-28 23:55:46,936 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14866 states to 14812 states and 27322 transitions. [2023-11-28 23:55:46,937 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14812 [2023-11-28 23:55:46,959 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14812 [2023-11-28 23:55:46,959 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14812 states and 27322 transitions. [2023-11-28 23:55:46,996 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-28 23:55:46,996 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14812 states and 27322 transitions. [2023-11-28 23:55:47,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14812 states and 27322 transitions. [2023-11-28 23:55:47,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14812 to 10490. [2023-11-28 23:55:47,310 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10490 states, 10490 states have (on average 1.86139180171592) internal successors, (19526), 10489 states have internal predecessors, (19526), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:55:47,345 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10490 states to 10490 states and 19526 transitions. [2023-11-28 23:55:47,347 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10490 states and 19526 transitions. [2023-11-28 23:55:47,350 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2023-11-28 23:55:47,354 INFO L428 stractBuchiCegarLoop]: Abstraction has 10490 states and 19526 transitions. [2023-11-28 23:55:47,354 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2023-11-28 23:55:47,354 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10490 states and 19526 transitions. [2023-11-28 23:55:47,396 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 5269 [2023-11-28 23:55:47,396 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:55:47,396 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:55:47,401 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:55:47,402 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:55:47,402 INFO L748 eck$LassoCheckResult]: Stem: 18966#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 18967#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 22228#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 22031#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 19805#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 19806#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 20884#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 20885#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 22524#L2208 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 18895#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 20454#L3174 assume 0 == initPersonOnFloor_~floor#1; 20455#L3175 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 19449#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 22072#L2304 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 19853#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 19854#L2966 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 19266#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 19746#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 19396#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 19211#L2208-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 19212#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 19146#L3174-1 assume 0 == initPersonOnFloor_~floor#1; 19147#L3175-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 18814#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 19924#L2304-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 19810#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 20246#L2966-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 20247#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 22266#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 22127#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 22128#L2899 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 22532#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 23939#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 23931#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 23930#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 22476#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 22477#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 23801#L1578 assume !(0 != timeShift_~tmp___9~2#1); 23802#L1669 assume !(1 == ~doorState~0); 28575#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 28574#L2899-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 28573#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 28572#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 28571#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 22571#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 20991#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 20992#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 21512#L1337 assume !(1 == ~currentHeading~0); 19976#L1347 assume !(0 == ~currentFloorID~0); 19977#L1347-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 25158#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 22991#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 22989#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 22981#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 22979#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 22980#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 22916#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 22914#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 22863#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 22864#L2607-2 [2023-11-28 23:55:47,403 INFO L750 eck$LassoCheckResult]: Loop: 22864#L2607-2 assume !false; 20090#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 19641#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 19642#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 22221#L2615 assume 1 != cleanup_~tmp___0~12#1; 22157#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 22158#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 21762#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 19340#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 18912#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 18913#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 23332#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 23331#L2899-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 22591#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 23313#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 22862#L1425-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 22861#getCurrentFloorID_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 22860#L1429-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 20031#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 24562#L1578-2 assume !(0 != timeShift_~tmp___9~2#1); 24563#L1669-3 assume 1 == ~doorState~0;~doorState~0 := 0; 28804#L1669-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 28803#L2899-73 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 28802#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 28801#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 28799#L1280-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 28800#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 28845#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 28843#L1677-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 28842#L1337-3 assume !(1 == ~currentHeading~0); 21660#L1347-9 assume !(0 == ~currentFloorID~0); 20614#L1347-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 25155#L1353-7 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 23428#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 23427#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 23426#L2342-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 23425#L2343-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 23424#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 22899#L2347-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 22900#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 22865#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 22864#L2607-2 [2023-11-28 23:55:47,404 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:55:47,404 INFO L85 PathProgramCache]: Analyzing trace with hash -424054295, now seen corresponding path program 2 times [2023-11-28 23:55:47,404 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:55:47,404 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1722805181] [2023-11-28 23:55:47,404 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:55:47,405 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:55:47,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:55:47,510 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:55:47,510 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:55:47,511 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1722805181] [2023-11-28 23:55:47,511 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1722805181] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:55:47,511 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:55:47,511 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-28 23:55:47,511 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [366379385] [2023-11-28 23:55:47,512 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:55:47,512 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:55:47,513 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:55:47,513 INFO L85 PathProgramCache]: Analyzing trace with hash -1145366438, now seen corresponding path program 1 times [2023-11-28 23:55:47,513 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:55:47,514 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1122556175] [2023-11-28 23:55:47,514 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:55:47,514 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:55:47,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:55:47,586 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:55:47,586 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:55:47,586 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1122556175] [2023-11-28 23:55:47,587 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1122556175] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:55:47,587 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:55:47,587 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-28 23:55:47,587 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [311604334] [2023-11-28 23:55:47,588 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:55:47,588 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:55:47,588 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:55:47,589 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-28 23:55:47,589 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-28 23:55:47,590 INFO L87 Difference]: Start difference. First operand 10490 states and 19526 transitions. cyclomatic complexity: 9038 Second operand has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 3 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:55:47,829 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:55:47,829 INFO L93 Difference]: Finished difference Result 15791 states and 29351 transitions. [2023-11-28 23:55:47,829 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15791 states and 29351 transitions. [2023-11-28 23:55:47,920 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 10510 [2023-11-28 23:55:48,017 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15791 states to 15791 states and 29351 transitions. [2023-11-28 23:55:48,017 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15791 [2023-11-28 23:55:48,033 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15791 [2023-11-28 23:55:48,033 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15791 states and 29351 transitions. [2023-11-28 23:55:48,051 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-28 23:55:48,051 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15791 states and 29351 transitions. [2023-11-28 23:55:48,072 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15791 states and 29351 transitions. [2023-11-28 23:55:48,366 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15791 to 15783. [2023-11-28 23:55:48,391 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15783 states, 15783 states have (on average 1.8588988151808907) internal successors, (29339), 15782 states have internal predecessors, (29339), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:55:48,438 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15783 states to 15783 states and 29339 transitions. [2023-11-28 23:55:48,438 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15783 states and 29339 transitions. [2023-11-28 23:55:48,438 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-28 23:55:48,439 INFO L428 stractBuchiCegarLoop]: Abstraction has 15783 states and 29339 transitions. [2023-11-28 23:55:48,439 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2023-11-28 23:55:48,440 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15783 states and 29339 transitions. [2023-11-28 23:55:48,552 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 10502 [2023-11-28 23:55:48,552 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:55:48,552 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:55:48,558 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:55:48,558 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:55:48,559 INFO L748 eck$LassoCheckResult]: Stem: 45259#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 45260#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 48620#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 48398#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 46097#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 46098#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 47190#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 47191#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 48984#L2208 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 45184#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 46746#L3174 assume 0 == initPersonOnFloor_~floor#1; 46747#L3175 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 45739#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 48446#L2304 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 46147#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 46148#L2966 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 45556#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 46039#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 45689#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 45506#L2208-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 45507#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 45437#L3174-1 assume 0 == initPersonOnFloor_~floor#1; 45438#L3175-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 45103#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 46213#L2304-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 46101#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 46537#L2966-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 46538#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 48670#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 48508#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 48509#L2899 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 48099#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 48100#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 45652#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 45654#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 48701#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 45424#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 45425#L1578 assume !(0 != timeShift_~tmp___9~2#1); 46489#L1669 assume !(1 == ~doorState~0); 46490#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 46469#L2899-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 46470#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 46507#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 46508#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 49051#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 48978#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 49380#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 48989#L1337 assume !(1 == ~currentHeading~0); 48990#L1347 assume !(0 == ~currentFloorID~0); 51155#L1347-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 51154#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 56145#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 56144#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 56143#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 56141#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 56142#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 56126#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 56123#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 49773#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 49770#L2607-2 [2023-11-28 23:55:48,559 INFO L750 eck$LassoCheckResult]: Loop: 49770#L2607-2 assume !false; 49765#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 49756#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 49753#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 49746#L2615 assume 1 != cleanup_~tmp___0~12#1; 49744#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 49733#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 49715#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 49697#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 49686#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 49674#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 49675#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 49420#L2899-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 49208#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 49414#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 49415#L1425-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 53019#getCurrentFloorID_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 49378#L1429-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 46319#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 55313#L1578-2 assume !(0 != timeShift_~tmp___9~2#1); 55314#L1669-3 assume 1 == ~doorState~0;~doorState~0 := 0; 59081#L1669-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 48881#L2899-73 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 48882#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 45141#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 45142#L1280-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 59035#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 59036#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 59178#L1677-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 57128#L1337-3 assume !(1 == ~currentHeading~0); 51334#L1347-9 assume !(0 == ~currentFloorID~0); 51163#L1347-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 49842#L1353-7 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 49832#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 49831#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 49830#L2342-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 49828#L2343-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 49829#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 49801#L2347-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 49783#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 49774#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 49770#L2607-2 [2023-11-28 23:55:48,560 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:55:48,561 INFO L85 PathProgramCache]: Analyzing trace with hash -424054295, now seen corresponding path program 3 times [2023-11-28 23:55:48,561 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:55:48,561 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1769348621] [2023-11-28 23:55:48,561 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:55:48,562 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:55:48,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:55:48,654 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:55:48,655 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:55:48,655 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1769348621] [2023-11-28 23:55:48,655 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1769348621] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:55:48,656 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:55:48,656 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-28 23:55:48,656 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1364968811] [2023-11-28 23:55:48,656 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:55:48,657 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:55:48,657 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:55:48,657 INFO L85 PathProgramCache]: Analyzing trace with hash -1538393448, now seen corresponding path program 1 times [2023-11-28 23:55:48,658 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:55:48,658 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [166405391] [2023-11-28 23:55:48,658 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:55:48,658 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:55:48,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:55:48,722 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:55:48,722 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:55:48,722 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [166405391] [2023-11-28 23:55:48,723 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [166405391] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:55:48,723 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:55:48,723 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-28 23:55:48,723 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1462594550] [2023-11-28 23:55:48,724 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:55:48,724 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:55:48,724 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:55:48,725 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-28 23:55:48,725 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-28 23:55:48,726 INFO L87 Difference]: Start difference. First operand 15783 states and 29339 transitions. cyclomatic complexity: 13558 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:55:49,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:55:49,224 INFO L93 Difference]: Finished difference Result 39083 states and 72455 transitions. [2023-11-28 23:55:49,224 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39083 states and 72455 transitions. [2023-11-28 23:55:49,524 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 31218 [2023-11-28 23:55:49,706 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39083 states to 39083 states and 72455 transitions. [2023-11-28 23:55:49,706 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 39083 [2023-11-28 23:55:49,741 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 39083 [2023-11-28 23:55:49,742 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39083 states and 72455 transitions. [2023-11-28 23:55:49,768 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-28 23:55:49,769 INFO L218 hiAutomatonCegarLoop]: Abstraction has 39083 states and 72455 transitions. [2023-11-28 23:55:49,799 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39083 states and 72455 transitions. [2023-11-28 23:55:50,265 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39083 to 23254. [2023-11-28 23:55:50,297 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23254 states, 23254 states have (on average 1.8545626558871593) internal successors, (43126), 23253 states have internal predecessors, (43126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:55:50,361 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23254 states to 23254 states and 43126 transitions. [2023-11-28 23:55:50,362 INFO L240 hiAutomatonCegarLoop]: Abstraction has 23254 states and 43126 transitions. [2023-11-28 23:55:50,362 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-28 23:55:50,363 INFO L428 stractBuchiCegarLoop]: Abstraction has 23254 states and 43126 transitions. [2023-11-28 23:55:50,363 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2023-11-28 23:55:50,364 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 23254 states and 43126 transitions. [2023-11-28 23:55:50,437 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 15574 [2023-11-28 23:55:50,437 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:55:50,438 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:55:50,444 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:55:50,444 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:55:50,445 INFO L748 eck$LassoCheckResult]: Stem: 100138#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 100139#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 103545#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 103325#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 100982#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 100983#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 102095#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 102096#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 103918#L2208 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 100063#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 101648#L3174 assume 0 == initPersonOnFloor_~floor#1; 101649#L3175 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 100625#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 103377#L2304 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 101034#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 101035#L2966 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 100441#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 100921#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 100575#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 100390#L2208-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 100391#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 100321#L3174-1 assume 0 == initPersonOnFloor_~floor#1; 100322#L3175-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 99982#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 101103#L2304-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 100986#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 101439#L2966-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 101440#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 103590#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 103437#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 103438#L2899 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 103933#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 104159#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 100537#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 100539#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 103853#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 100308#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 100309#L1578 assume !(0 != timeShift_~tmp___9~2#1); 101385#L1669 assume !(1 == ~doorState~0); 101387#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 115096#L2899-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 115095#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 115094#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 115093#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 104003#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 102206#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 102207#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 102740#L1337 assume !(1 == ~currentHeading~0); 101157#L1347 assume !(0 == ~currentFloorID~0); 101158#L1347-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 115047#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 118797#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 118796#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 118795#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 118794#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 118793#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 118785#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 118780#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 118778#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 118777#L2607-2 [2023-11-28 23:55:50,445 INFO L750 eck$LassoCheckResult]: Loop: 118777#L2607-2 assume !false; 118776#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 118775#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 118774#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 118773#L2615 assume 1 != cleanup_~tmp___0~12#1; 118772#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 118767#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 118765#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 118749#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 118740#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 118739#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 118737#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 118734#L2899-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 105578#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 118733#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 118726#L1425-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 118727#getCurrentFloorID_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 118738#L1429-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 102660#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 120488#L1578-2 assume !(0 != timeShift_~tmp___9~2#1); 120487#L1669-3 assume !(1 == ~doorState~0); 120486#L1669-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 120484#L2899-73 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 120482#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 120481#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 120479#L1280-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 120265#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 120262#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 120259#L1677-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 120257#L1337-3 assume !(1 == ~currentHeading~0); 116952#L1347-9 assume !(0 == ~currentFloorID~0); 116763#L1347-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 116748#L1353-7 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 120254#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 120253#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 120252#L2342-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 120198#L2343-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 120197#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 120186#L2347-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 118781#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 118779#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 118777#L2607-2 [2023-11-28 23:55:50,446 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:55:50,446 INFO L85 PathProgramCache]: Analyzing trace with hash -424054295, now seen corresponding path program 4 times [2023-11-28 23:55:50,446 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:55:50,447 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1040289126] [2023-11-28 23:55:50,447 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:55:50,447 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:55:50,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:55:50,528 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:55:50,529 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:55:50,529 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1040289126] [2023-11-28 23:55:50,529 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1040289126] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:55:50,529 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:55:50,530 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-28 23:55:50,530 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1032053883] [2023-11-28 23:55:50,530 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:55:50,530 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:55:50,531 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:55:50,531 INFO L85 PathProgramCache]: Analyzing trace with hash -1115691622, now seen corresponding path program 1 times [2023-11-28 23:55:50,531 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:55:50,531 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [271085961] [2023-11-28 23:55:50,532 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:55:50,532 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:55:50,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-28 23:55:50,550 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-28 23:55:50,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-28 23:55:50,595 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-28 23:55:51,848 INFO L210 LassoAnalysis]: Preferences: [2023-11-28 23:55:51,849 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2023-11-28 23:55:51,849 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2023-11-28 23:55:51,849 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2023-11-28 23:55:51,849 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2023-11-28 23:55:51,850 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:51,850 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2023-11-28 23:55:51,850 INFO L132 ssoRankerPreferences]: Path of dumped script: [2023-11-28 23:55:51,850 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec1_product31.cil.c_Iteration4_Loop [2023-11-28 23:55:51,850 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2023-11-28 23:55:51,850 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2023-11-28 23:55:51,875 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,884 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,888 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,891 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,894 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,896 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,898 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,901 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,903 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,905 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,908 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,911 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,913 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,915 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,920 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,922 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,925 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,928 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,930 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,933 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,936 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,939 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,941 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,943 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,945 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,947 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,950 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,952 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,954 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,957 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,959 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,961 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,966 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,969 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,971 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,973 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,975 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,977 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,979 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,981 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,983 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,985 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,988 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,991 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,993 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,995 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:51,998 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,000 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,002 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,004 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,006 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,008 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,011 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,013 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,016 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,018 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,025 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,027 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,030 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,036 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,041 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,043 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,045 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,047 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,050 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,052 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,054 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,056 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,059 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,060 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,062 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,063 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,065 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,067 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,069 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,071 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,073 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,075 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,077 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,078 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,080 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,081 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,083 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,084 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,085 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,087 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,088 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,090 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,091 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,092 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,094 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,100 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,101 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,103 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,105 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,106 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,108 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,109 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,111 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,452 INFO L294 LassoAnalysis]: Preprocessing complete. [2023-11-28 23:55:52,453 INFO L404 LassoAnalysis]: Checking for nontermination... [2023-11-28 23:55:52,455 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:52,455 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:52,456 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:52,457 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2023-11-28 23:55:52,458 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2023-11-28 23:55:52,458 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-28 23:55:52,474 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2023-11-28 23:55:52,474 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification1_spec__3_#t~ret121#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification1_spec__3_#t~ret121#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2023-11-28 23:55:52,478 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:52,478 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:52,478 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:52,479 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:52,480 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2023-11-28 23:55:52,482 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2023-11-28 23:55:52,482 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-28 23:55:52,497 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2023-11-28 23:55:52,497 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp___0~12#1=0} Honda state: {ULTIMATE.start_cleanup_~tmp___0~12#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2023-11-28 23:55:52,500 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2023-11-28 23:55:52,500 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:52,500 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:52,502 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:52,502 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2023-11-28 23:55:52,504 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2023-11-28 23:55:52,504 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-28 23:55:52,517 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2023-11-28 23:55:52,517 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~6#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~6#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2023-11-28 23:55:52,520 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Ended with exit code 0 [2023-11-28 23:55:52,521 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:52,521 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:52,522 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:52,524 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2023-11-28 23:55:52,526 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2023-11-28 23:55:52,526 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-28 23:55:52,539 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2023-11-28 23:55:52,539 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret60#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret60#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2023-11-28 23:55:52,542 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:52,543 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:52,543 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:52,544 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:52,545 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2023-11-28 23:55:52,546 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2023-11-28 23:55:52,546 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-28 23:55:52,558 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2023-11-28 23:55:52,558 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~2#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~2#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2023-11-28 23:55:52,562 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:52,562 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:52,562 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:52,563 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:52,564 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2023-11-28 23:55:52,565 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2023-11-28 23:55:52,566 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-28 23:55:52,580 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2023-11-28 23:55:52,581 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret78#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret78#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2023-11-28 23:55:52,584 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:52,584 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:52,584 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:52,585 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:52,586 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2023-11-28 23:55:52,588 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2023-11-28 23:55:52,588 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-28 23:55:52,601 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2023-11-28 23:55:52,601 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret113#1=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret113#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2023-11-28 23:55:52,604 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Ended with exit code 0 [2023-11-28 23:55:52,604 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:52,604 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:52,605 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:52,606 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2023-11-28 23:55:52,608 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2023-11-28 23:55:52,608 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-28 23:55:52,620 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2023-11-28 23:55:52,620 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification1_spec__3_~tmp___3~5#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification1_spec__3_~tmp___3~5#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2023-11-28 23:55:52,624 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2023-11-28 23:55:52,624 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:52,624 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:52,625 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:52,626 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2023-11-28 23:55:52,628 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2023-11-28 23:55:52,628 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-28 23:55:52,642 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2023-11-28 23:55:52,642 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification1_spec__3_~tmp___2~5#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification1_spec__3_~tmp___2~5#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2023-11-28 23:55:52,646 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:52,647 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:52,647 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:52,648 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:52,649 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2023-11-28 23:55:52,650 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2023-11-28 23:55:52,651 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-28 23:55:52,663 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2023-11-28 23:55:52,663 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#res#1=1} Honda state: {ULTIMATE.start_anyStopRequested_#res#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2023-11-28 23:55:52,665 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Ended with exit code 0 [2023-11-28 23:55:52,666 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:52,666 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:52,667 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:52,668 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2023-11-28 23:55:52,670 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2023-11-28 23:55:52,670 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-28 23:55:52,681 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2023-11-28 23:55:52,681 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret79#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret79#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2023-11-28 23:55:52,684 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Ended with exit code 0 [2023-11-28 23:55:52,684 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:52,684 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:52,685 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:52,686 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2023-11-28 23:55:52,688 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2023-11-28 23:55:52,688 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-28 23:55:52,700 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2023-11-28 23:55:52,700 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2023-11-28 23:55:52,702 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Ended with exit code 0 [2023-11-28 23:55:52,705 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:52,705 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:52,706 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:52,707 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2023-11-28 23:55:52,708 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2023-11-28 23:55:52,709 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-28 23:55:52,721 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2023-11-28 23:55:52,721 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification1_spec__3_#t~ret123#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification1_spec__3_#t~ret123#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2023-11-28 23:55:52,723 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Ended with exit code 0 [2023-11-28 23:55:52,724 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:52,724 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:52,726 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:52,730 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2023-11-28 23:55:52,731 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2023-11-28 23:55:52,731 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-28 23:55:52,746 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Ended with exit code 0 [2023-11-28 23:55:52,746 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:52,746 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:52,747 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:52,748 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2023-11-28 23:55:52,750 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2023-11-28 23:55:52,750 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-28 23:55:52,782 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2023-11-28 23:55:52,785 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Ended with exit code 0 [2023-11-28 23:55:52,786 INFO L210 LassoAnalysis]: Preferences: [2023-11-28 23:55:52,786 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2023-11-28 23:55:52,786 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2023-11-28 23:55:52,786 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2023-11-28 23:55:52,786 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2023-11-28 23:55:52,786 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:52,786 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2023-11-28 23:55:52,786 INFO L132 ssoRankerPreferences]: Path of dumped script: [2023-11-28 23:55:52,786 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec1_product31.cil.c_Iteration4_Loop [2023-11-28 23:55:52,786 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2023-11-28 23:55:52,786 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2023-11-28 23:55:52,792 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,795 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,798 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,800 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,802 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,804 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,805 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,807 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,808 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,810 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,811 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,812 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,813 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,815 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,818 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,819 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,821 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,822 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,825 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,826 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,828 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,830 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,832 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,834 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,836 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,837 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,839 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,840 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,843 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,850 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,852 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,854 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,856 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,857 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,862 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,864 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,867 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,869 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,871 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,873 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,875 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,877 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,879 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,881 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,883 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,885 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,888 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,890 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,892 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,894 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,896 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,898 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,900 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,902 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,904 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,905 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,911 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,913 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,915 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,917 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,922 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,924 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,926 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,928 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,930 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,931 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,938 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,940 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,942 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,944 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,946 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,948 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,950 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,952 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,954 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,957 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,959 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,961 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,963 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,965 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,967 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,968 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,970 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,972 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,974 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,976 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,977 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,983 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,985 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,987 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,994 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,996 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:52,999 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:53,007 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:53,009 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:53,012 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:53,015 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:53,017 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:53,019 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-28 23:55:53,439 INFO L294 LassoAnalysis]: Preprocessing complete. [2023-11-28 23:55:53,443 INFO L490 LassoAnalysis]: Using template 'affine'. [2023-11-28 23:55:53,445 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,445 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,450 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,458 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2023-11-28 23:55:53,459 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,472 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,472 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,473 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,473 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,473 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,475 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,475 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,480 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,486 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Ended with exit code 0 [2023-11-28 23:55:53,487 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,487 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,488 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,491 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2023-11-28 23:55:53,492 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,504 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,504 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,505 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,505 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,505 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,506 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,506 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,509 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,514 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:53,515 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,515 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,516 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,517 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2023-11-28 23:55:53,520 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,532 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,532 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,533 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,533 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,533 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,534 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,534 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,536 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,552 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Ended with exit code 0 [2023-11-28 23:55:53,552 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,553 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,554 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,556 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2023-11-28 23:55:53,558 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,570 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,571 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,571 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,571 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,571 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,572 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,572 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,574 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,577 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Ended with exit code 0 [2023-11-28 23:55:53,578 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,578 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,579 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,581 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2023-11-28 23:55:53,583 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,596 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,596 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,597 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,597 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,597 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,597 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,598 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,613 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,617 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Ended with exit code 0 [2023-11-28 23:55:53,618 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,618 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,619 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,620 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2023-11-28 23:55:53,621 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,631 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,631 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,631 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,631 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,631 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,632 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,632 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,633 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,636 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:53,637 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,637 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,638 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,640 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2023-11-28 23:55:53,641 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,651 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,651 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,651 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,651 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,652 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,652 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,652 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,655 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,657 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Ended with exit code 0 [2023-11-28 23:55:53,657 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,657 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,662 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,663 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2023-11-28 23:55:53,663 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,673 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,673 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,674 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,674 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,674 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,674 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,674 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,676 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,679 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Ended with exit code 0 [2023-11-28 23:55:53,679 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,679 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,680 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,682 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2023-11-28 23:55:53,683 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,695 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,695 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,695 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,696 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,696 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,696 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,696 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,698 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,700 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Ended with exit code 0 [2023-11-28 23:55:53,701 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,701 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,702 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,703 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2023-11-28 23:55:53,704 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,715 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,715 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,715 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,715 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,715 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,716 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,716 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,717 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,720 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:53,721 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,721 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,722 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,723 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2023-11-28 23:55:53,724 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,734 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,734 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,734 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,735 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,735 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,735 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,735 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,737 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,740 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Ended with exit code 0 [2023-11-28 23:55:53,741 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,741 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,742 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,745 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2023-11-28 23:55:53,745 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,758 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,758 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,758 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,758 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,758 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,759 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,759 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,761 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,764 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Ended with exit code 0 [2023-11-28 23:55:53,764 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,765 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,766 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,769 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2023-11-28 23:55:53,771 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,784 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,784 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,784 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,784 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,784 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,785 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,785 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,787 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,790 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Ended with exit code 0 [2023-11-28 23:55:53,790 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,791 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,791 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,792 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2023-11-28 23:55:53,794 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,804 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,804 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,804 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,804 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2023-11-28 23:55:53,805 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,806 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2023-11-28 23:55:53,806 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,809 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,811 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Ended with exit code 0 [2023-11-28 23:55:53,812 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,812 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,813 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,813 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Waiting until timeout for monitored process [2023-11-28 23:55:53,815 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,826 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,826 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,826 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,826 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,826 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,827 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,827 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,829 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,832 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Ended with exit code 0 [2023-11-28 23:55:53,832 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,832 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,833 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,834 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Waiting until timeout for monitored process [2023-11-28 23:55:53,835 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,848 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,848 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,848 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,848 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,849 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,849 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,849 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,851 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,853 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:53,853 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,853 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,854 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,855 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Waiting until timeout for monitored process [2023-11-28 23:55:53,856 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,867 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,867 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,867 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,867 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,867 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,868 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,868 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,870 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,872 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Ended with exit code 0 [2023-11-28 23:55:53,872 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,872 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,873 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,874 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Waiting until timeout for monitored process [2023-11-28 23:55:53,875 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,886 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,886 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,886 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,886 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,887 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,887 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,887 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,889 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,891 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Ended with exit code 0 [2023-11-28 23:55:53,891 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,891 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,892 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,893 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Waiting until timeout for monitored process [2023-11-28 23:55:53,895 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,906 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,906 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,906 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,906 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,907 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,907 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,907 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,909 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,911 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Ended with exit code 0 [2023-11-28 23:55:53,911 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,911 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,912 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,913 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Waiting until timeout for monitored process [2023-11-28 23:55:53,915 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,926 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,926 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,926 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,926 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,926 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,927 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,927 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,928 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,931 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:53,931 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,931 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,932 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,933 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Waiting until timeout for monitored process [2023-11-28 23:55:53,934 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,946 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,946 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,946 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,946 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,946 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,947 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,947 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,948 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,951 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:53,951 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,951 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,952 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,953 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Waiting until timeout for monitored process [2023-11-28 23:55:53,955 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,967 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,967 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,967 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,967 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,967 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,967 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,968 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,969 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,972 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Ended with exit code 0 [2023-11-28 23:55:53,972 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,972 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,973 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,974 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Waiting until timeout for monitored process [2023-11-28 23:55:53,975 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:53,986 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:53,986 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:53,986 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:53,986 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:53,986 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:53,987 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:53,987 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:53,988 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:53,991 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:53,991 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:53,992 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:53,992 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:53,994 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Waiting until timeout for monitored process [2023-11-28 23:55:53,995 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,006 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,006 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,006 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,006 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,006 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,007 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,007 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,008 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,011 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:54,011 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,011 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,012 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,013 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Waiting until timeout for monitored process [2023-11-28 23:55:54,015 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,026 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,026 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,027 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,027 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,027 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,027 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,027 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,029 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,031 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:54,032 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,032 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,033 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,034 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Waiting until timeout for monitored process [2023-11-28 23:55:54,035 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,048 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,048 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,048 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,048 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,049 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,049 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,049 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,051 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,053 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Ended with exit code 0 [2023-11-28 23:55:54,053 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,053 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,054 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,055 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Waiting until timeout for monitored process [2023-11-28 23:55:54,057 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,069 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,069 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,069 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,069 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,069 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,070 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,070 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,071 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,074 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:54,074 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,074 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,075 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,076 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Waiting until timeout for monitored process [2023-11-28 23:55:54,078 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,089 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,090 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,090 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,090 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,090 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,091 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,091 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,092 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,095 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:54,095 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,095 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,096 INFO L229 MonitoredProcess]: Starting monitored process 45 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,097 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (45)] Waiting until timeout for monitored process [2023-11-28 23:55:54,098 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,109 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,109 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,109 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,109 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,109 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,110 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,110 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,111 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,114 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (45)] Ended with exit code 0 [2023-11-28 23:55:54,114 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,114 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,115 INFO L229 MonitoredProcess]: Starting monitored process 46 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,116 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (46)] Waiting until timeout for monitored process [2023-11-28 23:55:54,117 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,130 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,130 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,130 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,131 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,131 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,131 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,131 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,133 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,135 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (46)] Ended with exit code 0 [2023-11-28 23:55:54,136 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,136 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,137 INFO L229 MonitoredProcess]: Starting monitored process 47 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,138 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (47)] Waiting until timeout for monitored process [2023-11-28 23:55:54,139 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,150 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,150 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,151 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,151 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,151 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,151 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,151 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,153 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,155 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (47)] Ended with exit code 0 [2023-11-28 23:55:54,155 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,156 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,156 INFO L229 MonitoredProcess]: Starting monitored process 48 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,157 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (48)] Waiting until timeout for monitored process [2023-11-28 23:55:54,159 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,170 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,170 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,170 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,170 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,170 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,171 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,171 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,173 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,175 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (48)] Ended with exit code 0 [2023-11-28 23:55:54,175 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,175 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,176 INFO L229 MonitoredProcess]: Starting monitored process 49 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,177 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (49)] Waiting until timeout for monitored process [2023-11-28 23:55:54,179 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,190 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,190 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,190 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,190 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,191 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,191 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,191 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,193 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,195 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (49)] Ended with exit code 0 [2023-11-28 23:55:54,196 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,196 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,197 INFO L229 MonitoredProcess]: Starting monitored process 50 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,198 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (50)] Waiting until timeout for monitored process [2023-11-28 23:55:54,200 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,211 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,211 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,212 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,212 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2023-11-28 23:55:54,212 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,213 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2023-11-28 23:55:54,213 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,216 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,219 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (50)] Ended with exit code 0 [2023-11-28 23:55:54,219 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,219 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,220 INFO L229 MonitoredProcess]: Starting monitored process 51 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,221 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (51)] Waiting until timeout for monitored process [2023-11-28 23:55:54,223 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,234 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,234 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,234 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,235 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,235 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,235 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,235 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,237 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,239 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (51)] Ended with exit code 0 [2023-11-28 23:55:54,239 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,240 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,240 INFO L229 MonitoredProcess]: Starting monitored process 52 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,242 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (52)] Waiting until timeout for monitored process [2023-11-28 23:55:54,243 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,253 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,253 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,254 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,254 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,254 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,254 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,254 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,256 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,260 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (52)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:54,260 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,260 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,261 INFO L229 MonitoredProcess]: Starting monitored process 53 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,263 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (53)] Waiting until timeout for monitored process [2023-11-28 23:55:54,264 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,277 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,277 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,277 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,277 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,277 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,278 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,278 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,279 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,282 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (53)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:54,283 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,283 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,284 INFO L229 MonitoredProcess]: Starting monitored process 54 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,288 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (54)] Waiting until timeout for monitored process [2023-11-28 23:55:54,289 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,300 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,300 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,300 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,300 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,301 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,301 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,301 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,303 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,305 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (54)] Ended with exit code 0 [2023-11-28 23:55:54,305 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,305 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,306 INFO L229 MonitoredProcess]: Starting monitored process 55 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,307 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (55)] Waiting until timeout for monitored process [2023-11-28 23:55:54,309 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,320 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,320 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,320 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,321 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,321 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,321 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,321 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,323 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,325 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (55)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:54,325 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,326 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,326 INFO L229 MonitoredProcess]: Starting monitored process 56 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,327 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (56)] Waiting until timeout for monitored process [2023-11-28 23:55:54,329 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,340 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,340 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,340 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,340 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,340 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,341 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,341 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,342 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,346 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (56)] Ended with exit code 0 [2023-11-28 23:55:54,346 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,346 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,347 INFO L229 MonitoredProcess]: Starting monitored process 57 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,348 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (57)] Waiting until timeout for monitored process [2023-11-28 23:55:54,349 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,360 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,360 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,360 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,360 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,361 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,361 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,361 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,363 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,365 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (57)] Ended with exit code 0 [2023-11-28 23:55:54,365 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,365 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,366 INFO L229 MonitoredProcess]: Starting monitored process 58 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,367 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (58)] Waiting until timeout for monitored process [2023-11-28 23:55:54,369 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,380 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,380 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,380 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,380 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,381 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,381 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,381 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,383 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,385 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (58)] Ended with exit code 0 [2023-11-28 23:55:54,386 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,386 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,387 INFO L229 MonitoredProcess]: Starting monitored process 59 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,387 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (59)] Waiting until timeout for monitored process [2023-11-28 23:55:54,389 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,400 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,400 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,400 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,401 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,401 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,401 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,401 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,403 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,405 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (59)] Ended with exit code 0 [2023-11-28 23:55:54,405 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,406 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,406 INFO L229 MonitoredProcess]: Starting monitored process 60 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,407 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (60)] Waiting until timeout for monitored process [2023-11-28 23:55:54,409 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,421 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,421 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,421 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,421 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,421 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,422 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,422 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,423 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,426 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (60)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:54,426 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,426 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,427 INFO L229 MonitoredProcess]: Starting monitored process 61 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,428 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (61)] Waiting until timeout for monitored process [2023-11-28 23:55:54,430 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,441 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,441 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,441 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,442 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,442 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,442 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,442 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,444 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,446 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (61)] Ended with exit code 0 [2023-11-28 23:55:54,446 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,446 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,447 INFO L229 MonitoredProcess]: Starting monitored process 62 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,448 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (62)] Waiting until timeout for monitored process [2023-11-28 23:55:54,450 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,460 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,460 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,460 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,460 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,460 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,461 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,461 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,462 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,464 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (62)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:54,465 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,465 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,466 INFO L229 MonitoredProcess]: Starting monitored process 63 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,467 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (63)] Waiting until timeout for monitored process [2023-11-28 23:55:54,468 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,479 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,479 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,479 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,479 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,479 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,480 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,480 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,481 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,483 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (63)] Ended with exit code 0 [2023-11-28 23:55:54,484 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,484 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,485 INFO L229 MonitoredProcess]: Starting monitored process 64 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,485 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (64)] Waiting until timeout for monitored process [2023-11-28 23:55:54,487 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,497 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,497 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,497 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,497 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,497 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,498 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,498 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,499 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,502 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (64)] Ended with exit code 0 [2023-11-28 23:55:54,503 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,503 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,504 INFO L229 MonitoredProcess]: Starting monitored process 65 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,505 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (65)] Waiting until timeout for monitored process [2023-11-28 23:55:54,506 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,517 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,517 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,517 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,517 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,517 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,518 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,518 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,519 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,522 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (65)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:54,522 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,522 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,523 INFO L229 MonitoredProcess]: Starting monitored process 66 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,524 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (66)] Waiting until timeout for monitored process [2023-11-28 23:55:54,525 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,536 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,536 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,537 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,537 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,537 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,537 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,537 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,539 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,541 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (66)] Ended with exit code 0 [2023-11-28 23:55:54,542 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,542 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,543 INFO L229 MonitoredProcess]: Starting monitored process 67 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,544 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (67)] Waiting until timeout for monitored process [2023-11-28 23:55:54,545 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,556 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,557 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,557 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,557 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,557 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,558 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,558 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,559 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,562 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (67)] Ended with exit code 0 [2023-11-28 23:55:54,562 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,563 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,563 INFO L229 MonitoredProcess]: Starting monitored process 68 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,564 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (68)] Waiting until timeout for monitored process [2023-11-28 23:55:54,566 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,576 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,577 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,577 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,577 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,577 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,577 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,578 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,579 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,582 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (68)] Ended with exit code 0 [2023-11-28 23:55:54,582 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,582 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,583 INFO L229 MonitoredProcess]: Starting monitored process 69 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,584 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (69)] Waiting until timeout for monitored process [2023-11-28 23:55:54,585 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,595 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,596 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,596 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,596 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,596 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,596 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,596 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,598 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,600 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (69)] Ended with exit code 0 [2023-11-28 23:55:54,600 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,600 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,601 INFO L229 MonitoredProcess]: Starting monitored process 70 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,602 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (70)] Waiting until timeout for monitored process [2023-11-28 23:55:54,603 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,613 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,614 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,614 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,614 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,614 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,614 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,614 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,616 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,618 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (70)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:54,618 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,619 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,619 INFO L229 MonitoredProcess]: Starting monitored process 71 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,620 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (71)] Waiting until timeout for monitored process [2023-11-28 23:55:54,622 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,632 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,632 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,632 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,632 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,632 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,633 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,633 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,634 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,636 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (71)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:54,637 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,637 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,638 INFO L229 MonitoredProcess]: Starting monitored process 72 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,638 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (72)] Waiting until timeout for monitored process [2023-11-28 23:55:54,640 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,650 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,651 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,651 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,651 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2023-11-28 23:55:54,651 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,652 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2023-11-28 23:55:54,652 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,656 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,658 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (72)] Ended with exit code 0 [2023-11-28 23:55:54,658 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,659 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,659 INFO L229 MonitoredProcess]: Starting monitored process 73 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,660 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (73)] Waiting until timeout for monitored process [2023-11-28 23:55:54,662 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,673 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,673 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,674 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,674 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,674 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,674 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,675 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,676 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,678 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (73)] Ended with exit code 0 [2023-11-28 23:55:54,679 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,679 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,680 INFO L229 MonitoredProcess]: Starting monitored process 74 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,680 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (74)] Waiting until timeout for monitored process [2023-11-28 23:55:54,682 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,693 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,693 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,693 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,693 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,693 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,694 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,694 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,695 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,697 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (74)] Ended with exit code 0 [2023-11-28 23:55:54,698 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,698 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,698 INFO L229 MonitoredProcess]: Starting monitored process 75 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,699 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (75)] Waiting until timeout for monitored process [2023-11-28 23:55:54,701 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,711 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,711 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,711 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,711 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,711 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,712 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,712 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,714 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2023-11-28 23:55:54,716 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (75)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:54,716 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,716 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,717 INFO L229 MonitoredProcess]: Starting monitored process 76 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,718 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (76)] Waiting until timeout for monitored process [2023-11-28 23:55:54,719 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-28 23:55:54,730 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-28 23:55:54,730 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-28 23:55:54,730 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-28 23:55:54,730 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-28 23:55:54,730 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-28 23:55:54,731 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-28 23:55:54,732 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-28 23:55:54,734 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2023-11-28 23:55:54,738 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2023-11-28 23:55:54,738 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 1 variables to zero. [2023-11-28 23:55:54,739 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-28 23:55:54,739 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-28 23:55:54,762 INFO L229 MonitoredProcess]: Starting monitored process 77 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-28 23:55:54,763 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (77)] Waiting until timeout for monitored process [2023-11-28 23:55:54,764 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2023-11-28 23:55:54,764 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2023-11-28 23:55:54,764 INFO L513 LassoAnalysis]: Proved termination. [2023-11-28 23:55:54,765 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2023-11-28 23:55:54,768 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (76)] Forceful destruction successful, exit code 0 [2023-11-28 23:55:54,769 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2023-11-28 23:55:54,788 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:55:54,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:55:54,912 INFO L262 TraceCheckSpWp]: Trace formula consists of 658 conjuncts, 2 conjunts are in the unsatisfiable core [2023-11-28 23:55:54,917 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-28 23:55:55,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:55:55,061 INFO L262 TraceCheckSpWp]: Trace formula consists of 154 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-28 23:55:55,064 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-28 23:55:55,121 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1898aac9-b556-4fcc-8c00-982865dd22b8/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (77)] Ended with exit code 0 [2023-11-28 23:55:55,221 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:55:55,228 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 5 loop predicates [2023-11-28 23:55:55,229 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 23254 states and 43126 transitions. cyclomatic complexity: 19874 Second operand has 7 states, 7 states have (on average 14.285714285714286) internal successors, (100), 7 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:55:57,617 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 23254 states and 43126 transitions. cyclomatic complexity: 19874. Second operand has 7 states, 7 states have (on average 14.285714285714286) internal successors, (100), 7 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 66737 states and 124088 transitions. Complement of second has 11 states. [2023-11-28 23:55:57,620 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 6 states 1 stem states 4 non-accepting loop states 1 accepting loop states [2023-11-28 23:55:57,621 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 14.285714285714286) internal successors, (100), 7 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:55:57,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 9979 transitions. [2023-11-28 23:55:57,638 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 9979 transitions. Stem has 59 letters. Loop has 41 letters. [2023-11-28 23:55:57,640 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2023-11-28 23:55:57,641 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 9979 transitions. Stem has 100 letters. Loop has 41 letters. [2023-11-28 23:55:57,642 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2023-11-28 23:55:57,642 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 9979 transitions. Stem has 59 letters. Loop has 82 letters. [2023-11-28 23:55:57,645 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2023-11-28 23:55:57,646 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 66737 states and 124088 transitions. [2023-11-28 23:55:58,090 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 31786 [2023-11-28 23:55:58,541 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 66737 states to 66737 states and 124088 transitions. [2023-11-28 23:55:58,541 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 44217 [2023-11-28 23:55:58,592 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 45222 [2023-11-28 23:55:58,592 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66737 states and 124088 transitions. [2023-11-28 23:55:58,595 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:55:58,595 INFO L218 hiAutomatonCegarLoop]: Abstraction has 66737 states and 124088 transitions. [2023-11-28 23:55:58,639 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66737 states and 124088 transitions. [2023-11-28 23:55:59,494 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66737 to 65386. [2023-11-28 23:55:59,557 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65386 states, 65386 states have (on average 1.8617441042424985) internal successors, (121732), 65385 states have internal predecessors, (121732), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:55:59,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65386 states to 65386 states and 121732 transitions. [2023-11-28 23:55:59,707 INFO L240 hiAutomatonCegarLoop]: Abstraction has 65386 states and 121732 transitions. [2023-11-28 23:55:59,707 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:55:59,707 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-28 23:55:59,707 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-28 23:55:59,707 INFO L87 Difference]: Start difference. First operand 65386 states and 121732 transitions. Second operand has 3 states, 3 states have (on average 19.666666666666668) internal successors, (59), 3 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:00,447 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:56:00,447 INFO L93 Difference]: Finished difference Result 65387 states and 121727 transitions. [2023-11-28 23:56:00,447 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 65387 states and 121727 transitions. [2023-11-28 23:56:00,697 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 31492 [2023-11-28 23:56:01,070 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 65387 states to 65387 states and 121727 transitions. [2023-11-28 23:56:01,070 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 43918 [2023-11-28 23:56:01,100 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 43918 [2023-11-28 23:56:01,100 INFO L73 IsDeterministic]: Start isDeterministic. Operand 65387 states and 121727 transitions. [2023-11-28 23:56:01,102 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:56:01,102 INFO L218 hiAutomatonCegarLoop]: Abstraction has 65387 states and 121727 transitions. [2023-11-28 23:56:01,146 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65387 states and 121727 transitions. [2023-11-28 23:56:01,644 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65387 to 65386. [2023-11-28 23:56:01,691 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65386 states, 65386 states have (on average 1.8616523414798274) internal successors, (121726), 65385 states have internal predecessors, (121726), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:01,845 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65386 states to 65386 states and 121726 transitions. [2023-11-28 23:56:01,846 INFO L240 hiAutomatonCegarLoop]: Abstraction has 65386 states and 121726 transitions. [2023-11-28 23:56:01,846 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-28 23:56:01,847 INFO L428 stractBuchiCegarLoop]: Abstraction has 65386 states and 121726 transitions. [2023-11-28 23:56:01,847 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2023-11-28 23:56:01,847 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 65386 states and 121726 transitions. [2023-11-28 23:56:02,006 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 31492 [2023-11-28 23:56:02,007 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:56:02,007 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:56:02,009 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:02,009 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:02,009 INFO L748 eck$LassoCheckResult]: Stem: 321388#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 321389#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 326526#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 326177#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 322643#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 322644#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 324346#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 324347#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 327105#L2208 assume !(0 == getOrigin_~person#1); 326634#L2212 assume !(1 == getOrigin_~person#1); 324228#L2216 assume !(2 == getOrigin_~person#1); 324229#L2220 assume !(3 == getOrigin_~person#1); 325378#L2224 assume !(4 == getOrigin_~person#1); 321279#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 321280#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 323674#L3174 assume 0 == initPersonOnFloor_~floor#1; 323675#L3175 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 322127#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 326236#L2304 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 322728#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 322729#L2966 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 321843#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 322578#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 322043#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 321774#L2208-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 321775#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 321672#L3174-1 assume 0 == initPersonOnFloor_~floor#1; 321673#L3175-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 321160#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 322835#L2304-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 322647#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 323341#L2966-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 323342#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 326595#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 326343#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 326344#L2899 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 327123#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 327334#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 327318#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 327315#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 326979#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 326980#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 326552#L1578 assume !(0 != timeShift_~tmp___9~2#1); 326553#L1669 assume !(1 == ~doorState~0); 326900#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 326901#L2899-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 326028#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 326029#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 326442#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 326443#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 339959#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 339957#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 339958#L1337 assume !(1 == ~currentHeading~0); 322918#L1347 assume !(0 == ~currentFloorID~0); 322567#L1347-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 322568#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 346820#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 346819#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 346818#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 346816#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 346817#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 346788#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 346784#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 346782#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 346780#L2607-2 assume !false; 346781#L2608 [2023-11-28 23:56:02,010 INFO L750 eck$LassoCheckResult]: Loop: 346781#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 366117#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 366116#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 366115#L2615 assume 1 != cleanup_~tmp___0~12#1; 366114#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 366109#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 366107#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 366091#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 366082#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 366081#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 366078#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 366075#L2899-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 357287#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 366074#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 366067#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 366064#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 366063#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 366055#L705-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 366049#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 366044#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 366043#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 366037#L1578-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 365931#L1580-2 assume !(0 != ~persons_0~0); 366543#L1580-3 assume !(0 != ~persons_1~0); 366537#L1594-1 assume !(0 != ~persons_2~0); 366503#L1608-1 assume !(0 != ~persons_3~0); 366499#L1622-1 assume !(0 != ~persons_4~0); 366463#L1636-1 assume !(0 != ~persons_5~0); 366462#L1650-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 366461#L2994-12 assume 0 == isPersonOnFloor_~floor#1; 366432#L2995-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 366418#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 366416#L1479-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 366414#L1479-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 366413#L2994-14 assume 0 == isPersonOnFloor_~floor#1; 366391#L2995-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 366371#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret66#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret66#1;havoc processWaitingOnFloor_#t~ret66#1; 366369#L1492-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 366367#L1492-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 366366#L2994-16 assume 0 == isPersonOnFloor_~floor#1; 366350#L2995-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 366323#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret68#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret68#1;havoc processWaitingOnFloor_#t~ret68#1; 366321#L1505-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 366319#L1505-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 366318#L2994-18 assume 0 == isPersonOnFloor_~floor#1; 366256#L2995-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 366254#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret70#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret70#1;havoc processWaitingOnFloor_#t~ret70#1; 366252#L1518-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 366250#L1518-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 366249#L2994-20 assume 0 == isPersonOnFloor_~floor#1; 366220#L2995-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 366212#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret72#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret72#1;havoc processWaitingOnFloor_#t~ret72#1; 366208#L1531-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 366206#L1531-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 366204#L2994-22 assume 0 == isPersonOnFloor_~floor#1; 366179#L2995-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 366165#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret74#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret74#1;havoc processWaitingOnFloor_#t~ret74#1; 366163#L1544-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 366161#L1544-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 366158#L2934-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 366155#L2946-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 366154#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 366151#L659-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 366148#L671-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 366147#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 366146#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 366145#L2342-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 366143#L2343-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 366144#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 366126#L2347-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 366121#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 366119#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 366118#L2607-2 assume !false; 346781#L2608 [2023-11-28 23:56:02,011 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:56:02,011 INFO L85 PathProgramCache]: Analyzing trace with hash 2008134979, now seen corresponding path program 1 times [2023-11-28 23:56:02,011 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:56:02,011 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [436987384] [2023-11-28 23:56:02,012 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:56:02,166 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:56:02,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:56:02,389 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:56:02,389 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:56:02,389 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [436987384] [2023-11-28 23:56:02,390 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [436987384] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:56:02,390 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:56:02,390 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-28 23:56:02,390 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1765837539] [2023-11-28 23:56:02,390 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:56:02,391 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:56:02,391 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:56:02,391 INFO L85 PathProgramCache]: Analyzing trace with hash -1584334940, now seen corresponding path program 1 times [2023-11-28 23:56:02,391 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:56:02,392 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [376783493] [2023-11-28 23:56:02,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:56:02,392 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:56:02,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:56:02,543 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:56:02,543 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:56:02,543 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [376783493] [2023-11-28 23:56:02,543 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [376783493] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:56:02,543 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:56:02,543 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-28 23:56:02,544 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [349769011] [2023-11-28 23:56:02,544 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:56:02,544 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:56:02,544 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:56:02,545 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-28 23:56:02,545 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-28 23:56:02,545 INFO L87 Difference]: Start difference. First operand 65386 states and 121726 transitions. cyclomatic complexity: 56349 Second operand has 6 states, 6 states have (on average 10.833333333333334) internal successors, (65), 6 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:03,489 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:56:03,489 INFO L93 Difference]: Finished difference Result 130703 states and 243328 transitions. [2023-11-28 23:56:03,489 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 130703 states and 243328 transitions. [2023-11-28 23:56:04,056 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 62984 [2023-11-28 23:56:04,450 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 130703 states to 130703 states and 243328 transitions. [2023-11-28 23:56:04,450 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 87765 [2023-11-28 23:56:04,658 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 87765 [2023-11-28 23:56:04,659 INFO L73 IsDeterministic]: Start isDeterministic. Operand 130703 states and 243328 transitions. [2023-11-28 23:56:04,662 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:56:04,662 INFO L218 hiAutomatonCegarLoop]: Abstraction has 130703 states and 243328 transitions. [2023-11-28 23:56:04,738 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130703 states and 243328 transitions. [2023-11-28 23:56:05,611 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130703 to 65382. [2023-11-28 23:56:05,657 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65382 states, 65382 states have (on average 1.861597993331498) internal successors, (121715), 65381 states have internal predecessors, (121715), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:05,811 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65382 states to 65382 states and 121715 transitions. [2023-11-28 23:56:05,812 INFO L240 hiAutomatonCegarLoop]: Abstraction has 65382 states and 121715 transitions. [2023-11-28 23:56:05,812 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-28 23:56:05,813 INFO L428 stractBuchiCegarLoop]: Abstraction has 65382 states and 121715 transitions. [2023-11-28 23:56:05,813 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2023-11-28 23:56:05,813 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 65382 states and 121715 transitions. [2023-11-28 23:56:06,166 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 31492 [2023-11-28 23:56:06,166 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:56:06,166 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:56:06,168 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:06,169 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:06,169 INFO L748 eck$LassoCheckResult]: Stem: 517492#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 517493#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 522564#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 522225#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 518745#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 518746#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 520415#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 520416#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 523101#L2208 assume !(0 == getOrigin_~person#1); 522672#L2212 assume !(1 == getOrigin_~person#1); 520293#L2216 assume !(2 == getOrigin_~person#1); 520294#L2220 assume !(3 == getOrigin_~person#1); 521442#L2224 assume !(4 == getOrigin_~person#1); 517390#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 517391#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 519754#L3174 assume !(0 == initPersonOnFloor_~floor#1); 519755#L3201 assume 1 == initPersonOnFloor_~floor#1; 518228#L3202 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 518229#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 522286#L2304 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 518826#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 518827#L2966 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 517953#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 518681#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 518142#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 517877#L2208-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 517878#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 517782#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 517783#L3201-1 assume 1 == initPersonOnFloor_~floor#1; 522013#L3202-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 517271#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 518937#L2304-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 518751#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 519432#L2966-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 519433#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 522637#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 522383#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 522384#L2899 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 521784#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 521785#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 523320#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 523317#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 523002#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 523003#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 522597#L1578 assume !(0 != timeShift_~tmp___9~2#1); 522598#L1669 assume !(1 == ~doorState~0); 523571#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 523570#L2899-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 523569#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 523568#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 522477#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 522478#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 523480#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 523481#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 536036#L1337 assume !(1 == ~currentHeading~0); 536161#L1347 assume !(0 == ~currentFloorID~0); 536797#L1347-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 523188#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 519966#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 519967#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 523153#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 523154#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 544051#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 544050#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 518642#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 519088#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 523161#L2607-2 assume !false; 547968#L2608 [2023-11-28 23:56:06,169 INFO L750 eck$LassoCheckResult]: Loop: 547968#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 565649#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 565648#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 565647#L2615 assume 1 != cleanup_~tmp___0~12#1; 565646#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 565641#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 565638#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 565639#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 570410#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 570409#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 570408#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 570407#L2899-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 552997#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 570406#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 570404#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 570405#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 570552#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 570549#L705-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 570546#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 570381#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 570380#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 570379#L1578-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 570331#L1580-2 assume !(0 != ~persons_0~0); 578573#L1580-3 assume !(0 != ~persons_1~0); 578567#L1594-1 assume !(0 != ~persons_2~0); 578533#L1608-1 assume !(0 != ~persons_3~0); 578529#L1622-1 assume !(0 != ~persons_4~0); 578493#L1636-1 assume !(0 != ~persons_5~0); 578492#L1650-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 578491#L2994-12 assume 0 == isPersonOnFloor_~floor#1; 578463#L2995-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 578449#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 578447#L1479-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 578445#L1479-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 578444#L2994-14 assume 0 == isPersonOnFloor_~floor#1; 578411#L2995-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 578391#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret66#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret66#1;havoc processWaitingOnFloor_#t~ret66#1; 578389#L1492-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 578387#L1492-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 578385#L2994-16 assume 0 == isPersonOnFloor_~floor#1; 578379#L2995-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 578347#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret68#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret68#1;havoc processWaitingOnFloor_#t~ret68#1; 578344#L1505-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 578342#L1505-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 578341#L2994-18 assume 0 == isPersonOnFloor_~floor#1; 578297#L2995-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 578295#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret70#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret70#1;havoc processWaitingOnFloor_#t~ret70#1; 578293#L1518-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 578252#L1518-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 578245#L2994-20 assume 0 == isPersonOnFloor_~floor#1; 578197#L2995-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 578188#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret72#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret72#1;havoc processWaitingOnFloor_#t~ret72#1; 578186#L1531-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 578184#L1531-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 578183#L2994-22 assume 0 == isPersonOnFloor_~floor#1; 578162#L2995-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 578149#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret74#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret74#1;havoc processWaitingOnFloor_#t~ret74#1; 578147#L1544-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 578145#L1544-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 578142#L2934-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 578139#L2946-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 578138#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 578131#L659-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 578127#L671-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 565831#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 565830#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 565829#L2342-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 565805#L2343-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 565804#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 565658#L2347-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 565653#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 565651#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 565650#L2607-2 assume !false; 547968#L2608 [2023-11-28 23:56:06,170 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:56:06,170 INFO L85 PathProgramCache]: Analyzing trace with hash -871240367, now seen corresponding path program 1 times [2023-11-28 23:56:06,170 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:56:06,170 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1057090909] [2023-11-28 23:56:06,170 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:56:06,170 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:56:06,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:56:06,268 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:56:06,269 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:56:06,269 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1057090909] [2023-11-28 23:56:06,269 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1057090909] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:56:06,269 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:56:06,269 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-28 23:56:06,269 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [819125061] [2023-11-28 23:56:06,270 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:56:06,270 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:56:06,270 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:56:06,270 INFO L85 PathProgramCache]: Analyzing trace with hash -1584334940, now seen corresponding path program 2 times [2023-11-28 23:56:06,270 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:56:06,270 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [895888351] [2023-11-28 23:56:06,271 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:56:06,271 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:56:06,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:56:06,383 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:56:06,384 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:56:06,384 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [895888351] [2023-11-28 23:56:06,384 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [895888351] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:56:06,384 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:56:06,384 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-28 23:56:06,384 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [755087696] [2023-11-28 23:56:06,384 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:56:06,385 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:56:06,385 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:56:06,385 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-28 23:56:06,385 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-28 23:56:06,385 INFO L87 Difference]: Start difference. First operand 65382 states and 121715 transitions. cyclomatic complexity: 56342 Second operand has 4 states, 4 states have (on average 16.75) internal successors, (67), 4 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:06,932 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:56:06,932 INFO L93 Difference]: Finished difference Result 65383 states and 121707 transitions. [2023-11-28 23:56:06,932 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 65383 states and 121707 transitions. [2023-11-28 23:56:07,155 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 31492 [2023-11-28 23:56:07,334 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 65383 states to 65383 states and 121707 transitions. [2023-11-28 23:56:07,334 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 43914 [2023-11-28 23:56:07,361 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 43914 [2023-11-28 23:56:07,361 INFO L73 IsDeterministic]: Start isDeterministic. Operand 65383 states and 121707 transitions. [2023-11-28 23:56:07,362 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:56:07,362 INFO L218 hiAutomatonCegarLoop]: Abstraction has 65383 states and 121707 transitions. [2023-11-28 23:56:07,395 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65383 states and 121707 transitions. [2023-11-28 23:56:08,126 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65383 to 65382. [2023-11-28 23:56:08,177 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65382 states, 65382 states have (on average 1.8614603407665717) internal successors, (121706), 65381 states have internal predecessors, (121706), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:08,382 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65382 states to 65382 states and 121706 transitions. [2023-11-28 23:56:08,382 INFO L240 hiAutomatonCegarLoop]: Abstraction has 65382 states and 121706 transitions. [2023-11-28 23:56:08,382 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-28 23:56:08,383 INFO L428 stractBuchiCegarLoop]: Abstraction has 65382 states and 121706 transitions. [2023-11-28 23:56:08,383 INFO L335 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2023-11-28 23:56:08,383 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 65382 states and 121706 transitions. [2023-11-28 23:56:08,704 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 31492 [2023-11-28 23:56:08,704 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:56:08,704 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:56:08,706 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:08,707 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:08,707 INFO L748 eck$LassoCheckResult]: Stem: 648275#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 648276#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 653255#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 652932#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 649526#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 649527#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 651195#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 651196#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 653805#L2208 assume !(0 == getOrigin_~person#1); 653356#L2212 assume !(1 == getOrigin_~person#1); 651080#L2216 assume !(2 == getOrigin_~person#1); 651081#L2220 assume !(3 == getOrigin_~person#1); 652189#L2224 assume !(4 == getOrigin_~person#1); 648171#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 648172#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 650535#L3174 assume !(0 == initPersonOnFloor_~floor#1); 650536#L3201 assume 1 == initPersonOnFloor_~floor#1; 649017#L3202 assume !(0 == initPersonOnFloor_~person#1); 649018#L3205 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 649788#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 652987#L2304 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 649605#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 649606#L2966 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 648738#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 649461#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 648930#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 648662#L2208-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 648663#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 648564#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 648565#L3201-1 assume 1 == initPersonOnFloor_~floor#1; 652725#L3202-2 assume !(0 == initPersonOnFloor_~person#1); 650990#L3205-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 648052#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 649719#L2304-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 649532#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 650215#L2966-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 650216#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 653320#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 653085#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 653086#L2899 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 652505#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 652506#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 654043#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 654040#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 653695#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 653696#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 653281#L1578 assume !(0 != timeShift_~tmp___9~2#1); 653282#L1669 assume !(1 == ~doorState~0); 666686#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 650111#L2899-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 650112#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 650171#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 650172#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 653914#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 653795#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 666550#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 666551#L1337 assume !(1 == ~currentHeading~0); 649797#L1347 assume !(0 == ~currentFloorID~0); 649450#L1347-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 649451#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 650749#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 650291#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 650292#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 653852#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 674219#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 669523#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 649420#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 649870#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 653861#L2607-2 assume !false; 678134#L2608 [2023-11-28 23:56:08,707 INFO L750 eck$LassoCheckResult]: Loop: 678134#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 691269#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 691268#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 691267#L2615 assume 1 != cleanup_~tmp___0~12#1; 691266#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 691265#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 691264#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 691253#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 691244#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 691243#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 691242#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 691241#L2899-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 683594#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 691240#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 691238#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 691236#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 691237#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 691219#L705-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 691216#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 691209#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 691176#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 691172#L1578-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 691173#L1580-2 assume !(0 != ~persons_0~0); 692143#L1580-3 assume !(0 != ~persons_1~0); 692137#L1594-1 assume !(0 != ~persons_2~0); 692103#L1608-1 assume !(0 != ~persons_3~0); 692099#L1622-1 assume !(0 != ~persons_4~0); 692063#L1636-1 assume !(0 != ~persons_5~0); 692062#L1650-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 692061#L2994-12 assume 0 == isPersonOnFloor_~floor#1; 692036#L2995-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 692017#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 692012#L1479-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 692006#L1479-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 691996#L2994-14 assume 0 == isPersonOnFloor_~floor#1; 691656#L2995-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 691632#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret66#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret66#1;havoc processWaitingOnFloor_#t~ret66#1; 691629#L1492-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 691627#L1492-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 691626#L2994-16 assume 0 == isPersonOnFloor_~floor#1; 691603#L2995-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 691576#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret68#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret68#1;havoc processWaitingOnFloor_#t~ret68#1; 691574#L1505-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 691572#L1505-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 691571#L2994-18 assume 0 == isPersonOnFloor_~floor#1; 691468#L2995-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 691466#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret70#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret70#1;havoc processWaitingOnFloor_#t~ret70#1; 691464#L1518-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 691462#L1518-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 691461#L2994-20 assume 0 == isPersonOnFloor_~floor#1; 691378#L2995-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 691369#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret72#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret72#1;havoc processWaitingOnFloor_#t~ret72#1; 691367#L1531-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 691365#L1531-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 691364#L2994-22 assume 0 == isPersonOnFloor_~floor#1; 691337#L2995-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 691323#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret74#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret74#1;havoc processWaitingOnFloor_#t~ret74#1; 691321#L1544-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 691319#L1544-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 691316#L2934-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 691313#L2946-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 691312#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 691309#L659-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 691302#L671-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 691300#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 691299#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 691298#L2342-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 691297#L2343-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 691296#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 691278#L2347-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 691277#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 691276#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 691275#L2607-2 assume !false; 678134#L2608 [2023-11-28 23:56:08,708 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:56:08,708 INFO L85 PathProgramCache]: Analyzing trace with hash -389226781, now seen corresponding path program 1 times [2023-11-28 23:56:08,708 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:56:08,708 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1341355858] [2023-11-28 23:56:08,708 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:56:08,709 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:56:08,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:56:08,808 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:56:08,809 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:56:08,809 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1341355858] [2023-11-28 23:56:08,809 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1341355858] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:56:08,809 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:56:08,809 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-28 23:56:08,809 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2052832285] [2023-11-28 23:56:08,809 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:56:08,810 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:56:08,810 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:56:08,810 INFO L85 PathProgramCache]: Analyzing trace with hash -1584334940, now seen corresponding path program 3 times [2023-11-28 23:56:08,810 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:56:08,810 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1809139949] [2023-11-28 23:56:08,810 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:56:08,811 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:56:08,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:56:08,917 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:56:08,917 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:56:08,917 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1809139949] [2023-11-28 23:56:08,917 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1809139949] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:56:08,917 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:56:08,918 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-28 23:56:08,918 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1221491698] [2023-11-28 23:56:08,918 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:56:08,918 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:56:08,918 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:56:08,919 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-28 23:56:08,919 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-28 23:56:08,919 INFO L87 Difference]: Start difference. First operand 65382 states and 121706 transitions. cyclomatic complexity: 56333 Second operand has 4 states, 4 states have (on average 17.25) internal successors, (69), 4 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:09,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:56:09,348 INFO L93 Difference]: Finished difference Result 65383 states and 121698 transitions. [2023-11-28 23:56:09,348 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 65383 states and 121698 transitions. [2023-11-28 23:56:09,783 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 31492 [2023-11-28 23:56:09,957 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 65383 states to 65383 states and 121698 transitions. [2023-11-28 23:56:09,957 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 43914 [2023-11-28 23:56:09,988 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 43914 [2023-11-28 23:56:09,988 INFO L73 IsDeterministic]: Start isDeterministic. Operand 65383 states and 121698 transitions. [2023-11-28 23:56:09,990 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:56:09,990 INFO L218 hiAutomatonCegarLoop]: Abstraction has 65383 states and 121698 transitions. [2023-11-28 23:56:10,030 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65383 states and 121698 transitions. [2023-11-28 23:56:10,644 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65383 to 65382. [2023-11-28 23:56:10,685 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65382 states, 65382 states have (on average 1.8613226882016458) internal successors, (121697), 65381 states have internal predecessors, (121697), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:10,835 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65382 states to 65382 states and 121697 transitions. [2023-11-28 23:56:10,835 INFO L240 hiAutomatonCegarLoop]: Abstraction has 65382 states and 121697 transitions. [2023-11-28 23:56:10,836 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-28 23:56:10,836 INFO L428 stractBuchiCegarLoop]: Abstraction has 65382 states and 121697 transitions. [2023-11-28 23:56:10,836 INFO L335 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2023-11-28 23:56:10,837 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 65382 states and 121697 transitions. [2023-11-28 23:56:10,997 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 31492 [2023-11-28 23:56:10,997 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:56:10,997 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:56:11,000 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:11,001 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:11,001 INFO L748 eck$LassoCheckResult]: Stem: 779050#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 779051#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 784113#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 783769#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 780302#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 780303#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 781985#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 781986#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 784649#L2208 assume !(0 == getOrigin_~person#1); 784216#L2212 assume !(1 == getOrigin_~person#1); 781866#L2216 assume !(2 == getOrigin_~person#1); 781867#L2220 assume !(3 == getOrigin_~person#1); 783006#L2224 assume !(4 == getOrigin_~person#1); 778947#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 778948#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 781330#L3174 assume !(0 == initPersonOnFloor_~floor#1); 781331#L3201 assume 1 == initPersonOnFloor_~floor#1; 779793#L3202 assume !(0 == initPersonOnFloor_~person#1); 779794#L3205 assume !(1 == initPersonOnFloor_~person#1); 780566#L3208 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 781282#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 783831#L2304 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 780382#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 780383#L2966 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 779513#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 780239#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 779705#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 779437#L2208-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 779438#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 779340#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 779341#L3201-1 assume 1 == initPersonOnFloor_~floor#1; 783560#L3202-2 assume !(0 == initPersonOnFloor_~person#1); 781776#L3205-2 assume !(1 == initPersonOnFloor_~person#1); 781777#L3208-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 778828#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 780496#L2304-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 780308#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 781000#L2966-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 781001#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 784183#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 783936#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 783937#L2899 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 783339#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 783340#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 784880#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 784877#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 784539#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 784540#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 784141#L1578 assume !(0 != timeShift_~tmp___9~2#1); 784142#L1669 assume !(1 == ~doorState~0); 797394#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 798309#L2899-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 798308#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 798307#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 798305#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 798304#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 798300#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 798297#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 798295#L1337 assume !(1 == ~currentHeading~0); 798296#L1347 assume !(0 == ~currentFloorID~0); 798292#L1347-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 798290#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 806152#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 806149#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 806145#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 806140#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 806136#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 806108#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 806104#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 806086#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 806079#L2607-2 assume !false; 806080#L2608 [2023-11-28 23:56:11,001 INFO L750 eck$LassoCheckResult]: Loop: 806080#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 826776#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 826775#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 826774#L2615 assume 1 != cleanup_~tmp___0~12#1; 826773#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 826768#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 826766#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 826746#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 826737#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 826736#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 826735#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 826734#L2899-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 813714#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 826733#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 826731#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 826729#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 826730#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 826706#L705-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 826703#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 826702#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 826646#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 826643#L1578-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 826642#L1580-2 assume !(0 != ~persons_0~0); 832642#L1580-3 assume !(0 != ~persons_1~0); 832636#L1594-1 assume !(0 != ~persons_2~0); 832602#L1608-1 assume !(0 != ~persons_3~0); 832598#L1622-1 assume !(0 != ~persons_4~0); 832562#L1636-1 assume !(0 != ~persons_5~0); 832561#L1650-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 832560#L2994-12 assume 0 == isPersonOnFloor_~floor#1; 832526#L2995-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 832512#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 832510#L1479-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 832508#L1479-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 832507#L2994-14 assume 0 == isPersonOnFloor_~floor#1; 832490#L2995-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 832466#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret66#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret66#1;havoc processWaitingOnFloor_#t~ret66#1; 832463#L1492-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 832461#L1492-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 832460#L2994-16 assume 0 == isPersonOnFloor_~floor#1; 832437#L2995-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 832410#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret68#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret68#1;havoc processWaitingOnFloor_#t~ret68#1; 832408#L1505-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 832406#L1505-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 832405#L2994-18 assume 0 == isPersonOnFloor_~floor#1; 832107#L2995-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 832105#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret70#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret70#1;havoc processWaitingOnFloor_#t~ret70#1; 832103#L1518-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 832096#L1518-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 832093#L2994-20 assume 0 == isPersonOnFloor_~floor#1; 832040#L2995-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 832031#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret72#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret72#1;havoc processWaitingOnFloor_#t~ret72#1; 832028#L1531-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 832025#L1531-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 832023#L2994-22 assume 0 == isPersonOnFloor_~floor#1; 831995#L2995-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 831981#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret74#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret74#1;havoc processWaitingOnFloor_#t~ret74#1; 831979#L1544-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 831977#L1544-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 831944#L2934-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 831926#L2946-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 831925#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 831922#L659-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 826825#L671-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 826821#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 826815#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 826807#L2342-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 826806#L2343-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 826805#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 826785#L2347-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 826780#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 826778#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 826777#L2607-2 assume !false; 806080#L2608 [2023-11-28 23:56:11,002 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:56:11,002 INFO L85 PathProgramCache]: Analyzing trace with hash -673105273, now seen corresponding path program 1 times [2023-11-28 23:56:11,002 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:56:11,002 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2109018890] [2023-11-28 23:56:11,002 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:56:11,003 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:56:11,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:56:11,104 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:56:11,104 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:56:11,104 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2109018890] [2023-11-28 23:56:11,104 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2109018890] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:56:11,104 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:56:11,104 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-28 23:56:11,105 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [792753403] [2023-11-28 23:56:11,105 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:56:11,105 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:56:11,105 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:56:11,105 INFO L85 PathProgramCache]: Analyzing trace with hash -1584334940, now seen corresponding path program 4 times [2023-11-28 23:56:11,106 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:56:11,106 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1516266957] [2023-11-28 23:56:11,106 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:56:11,106 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:56:11,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:56:11,209 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:56:11,209 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:56:11,209 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1516266957] [2023-11-28 23:56:11,209 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1516266957] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:56:11,209 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:56:11,209 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-28 23:56:11,210 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [874494814] [2023-11-28 23:56:11,210 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:56:11,210 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:56:11,210 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:56:11,211 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-28 23:56:11,211 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-28 23:56:11,211 INFO L87 Difference]: Start difference. First operand 65382 states and 121697 transitions. cyclomatic complexity: 56324 Second operand has 4 states, 4 states have (on average 17.75) internal successors, (71), 4 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:11,973 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:56:11,973 INFO L93 Difference]: Finished difference Result 65397 states and 121718 transitions. [2023-11-28 23:56:11,974 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 65397 states and 121718 transitions. [2023-11-28 23:56:12,293 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 31492 [2023-11-28 23:56:12,535 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 65397 states to 65397 states and 121718 transitions. [2023-11-28 23:56:12,535 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 43928 [2023-11-28 23:56:12,571 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 43928 [2023-11-28 23:56:12,571 INFO L73 IsDeterministic]: Start isDeterministic. Operand 65397 states and 121718 transitions. [2023-11-28 23:56:12,573 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:56:12,573 INFO L218 hiAutomatonCegarLoop]: Abstraction has 65397 states and 121718 transitions. [2023-11-28 23:56:12,615 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65397 states and 121718 transitions. [2023-11-28 23:56:13,392 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65397 to 65382. [2023-11-28 23:56:13,443 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65382 states, 65382 states have (on average 1.8612615092839007) internal successors, (121693), 65381 states have internal predecessors, (121693), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:13,599 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65382 states to 65382 states and 121693 transitions. [2023-11-28 23:56:13,599 INFO L240 hiAutomatonCegarLoop]: Abstraction has 65382 states and 121693 transitions. [2023-11-28 23:56:13,599 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-28 23:56:13,600 INFO L428 stractBuchiCegarLoop]: Abstraction has 65382 states and 121693 transitions. [2023-11-28 23:56:13,600 INFO L335 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2023-11-28 23:56:13,600 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 65382 states and 121693 transitions. [2023-11-28 23:56:13,764 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 31492 [2023-11-28 23:56:13,764 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:56:13,764 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:56:13,767 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:13,767 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:13,767 INFO L748 eck$LassoCheckResult]: Stem: 909841#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 909842#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 914842#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 914518#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 911092#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 911093#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 912757#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 912758#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 915369#L2208 assume !(0 == getOrigin_~person#1); 914945#L2212 assume !(1 == getOrigin_~person#1); 912637#L2216 assume !(2 == getOrigin_~person#1); 912638#L2220 assume !(3 == getOrigin_~person#1); 913766#L2224 assume !(4 == getOrigin_~person#1); 909738#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 909739#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 912103#L3174 assume !(0 == initPersonOnFloor_~floor#1); 912104#L3201 assume !(1 == initPersonOnFloor_~floor#1); 911127#L3228 assume !(2 == initPersonOnFloor_~floor#1); 910193#L3255 assume !(3 == initPersonOnFloor_~floor#1); 910195#L3282 assume !(4 == initPersonOnFloor_~floor#1); 912061#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 914583#L2304 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 911171#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 911172#L2966 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 910305#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 911026#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 910493#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 910230#L2208-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 910231#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 910134#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 910135#L3201-1 assume 1 == initPersonOnFloor_~floor#1; 914314#L3202-2 assume !(0 == initPersonOnFloor_~person#1); 912547#L3205-2 assume !(1 == initPersonOnFloor_~person#1); 912548#L3208-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 909619#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 911285#L2304-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 911098#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 911783#L2966-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 911784#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 914909#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 914678#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 914679#L2899 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 914099#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 914100#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 915570#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 915567#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 915271#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 915272#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 914870#L1578 assume !(0 != timeShift_~tmp___9~2#1); 914871#L1669 assume !(1 == ~doorState~0); 915209#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 915210#L2899-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 914395#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 914396#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 914769#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 914770#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 928089#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 928086#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 928087#L1337 assume !(1 == ~currentHeading~0); 911365#L1347 assume !(0 == ~currentFloorID~0); 911015#L1347-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 911016#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 912312#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 911858#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 911859#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 915242#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 911161#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 911162#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 910986#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 911438#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 915411#L2607-2 assume !false; 940468#L2608 [2023-11-28 23:56:13,767 INFO L750 eck$LassoCheckResult]: Loop: 940468#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 959536#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 959535#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 959534#L2615 assume 1 != cleanup_~tmp___0~12#1; 959533#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 959532#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 959531#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 959519#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 959513#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 959512#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 959511#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 959510#L2899-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 945054#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 959509#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 959507#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 959508#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 961867#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 961864#L705-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 961861#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 961836#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 961830#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 961827#L1578-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 961823#L1580-2 assume !(0 != ~persons_0~0); 961813#L1580-3 assume !(0 != ~persons_1~0); 961807#L1594-1 assume !(0 != ~persons_2~0); 961773#L1608-1 assume !(0 != ~persons_3~0); 961769#L1622-1 assume !(0 != ~persons_4~0); 961733#L1636-1 assume !(0 != ~persons_5~0); 961732#L1650-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 961731#L2994-12 assume 0 == isPersonOnFloor_~floor#1; 961642#L2995-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 961628#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 961626#L1479-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 961624#L1479-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 961623#L2994-14 assume 0 == isPersonOnFloor_~floor#1; 961606#L2995-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 961582#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret66#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret66#1;havoc processWaitingOnFloor_#t~ret66#1; 961579#L1492-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 961577#L1492-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 961576#L2994-16 assume 0 == isPersonOnFloor_~floor#1; 961553#L2995-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 961526#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret68#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret68#1;havoc processWaitingOnFloor_#t~ret68#1; 961524#L1505-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 961522#L1505-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 961521#L2994-18 assume 0 == isPersonOnFloor_~floor#1; 961418#L2995-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 961416#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret70#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret70#1;havoc processWaitingOnFloor_#t~ret70#1; 961414#L1518-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 961412#L1518-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 961411#L2994-20 assume 0 == isPersonOnFloor_~floor#1; 961383#L2995-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 961370#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret72#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret72#1;havoc processWaitingOnFloor_#t~ret72#1; 961367#L1531-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 961365#L1531-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 961364#L2994-22 assume 0 == isPersonOnFloor_~floor#1; 959582#L2995-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 959568#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret74#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret74#1;havoc processWaitingOnFloor_#t~ret74#1; 959566#L1544-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 959564#L1544-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 959561#L2934-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 959558#L2946-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 959557#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 959554#L659-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 959551#L671-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 959550#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 959549#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 959548#L2342-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 959547#L2343-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 958690#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 958691#L2347-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 958673#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 959538#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 959537#L2607-2 assume !false; 940468#L2608 [2023-11-28 23:56:13,768 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:56:13,768 INFO L85 PathProgramCache]: Analyzing trace with hash 129297927, now seen corresponding path program 1 times [2023-11-28 23:56:13,768 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:56:13,768 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1195253357] [2023-11-28 23:56:13,769 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:56:13,769 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:56:13,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:56:13,869 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:56:13,869 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:56:13,870 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1195253357] [2023-11-28 23:56:13,870 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1195253357] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:56:13,870 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:56:13,870 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-28 23:56:13,870 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [769670775] [2023-11-28 23:56:13,870 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:56:13,870 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:56:13,871 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:56:13,871 INFO L85 PathProgramCache]: Analyzing trace with hash -1584334940, now seen corresponding path program 5 times [2023-11-28 23:56:13,871 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:56:13,871 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [703060569] [2023-11-28 23:56:13,871 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:56:13,871 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:56:13,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:56:13,977 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:56:13,977 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:56:13,978 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [703060569] [2023-11-28 23:56:13,978 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [703060569] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:56:13,978 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:56:13,978 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-28 23:56:13,978 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1976219645] [2023-11-28 23:56:13,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:56:13,978 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:56:13,979 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:56:13,979 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-28 23:56:13,979 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-28 23:56:13,979 INFO L87 Difference]: Start difference. First operand 65382 states and 121693 transitions. cyclomatic complexity: 56320 Second operand has 4 states, 4 states have (on average 17.75) internal successors, (71), 4 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:14,937 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:56:14,937 INFO L93 Difference]: Finished difference Result 130663 states and 243229 transitions. [2023-11-28 23:56:14,937 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 130663 states and 243229 transitions. [2023-11-28 23:56:15,748 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 62984 [2023-11-28 23:56:16,132 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 130663 states to 130663 states and 243229 transitions. [2023-11-28 23:56:16,132 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 87725 [2023-11-28 23:56:16,187 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 87725 [2023-11-28 23:56:16,187 INFO L73 IsDeterministic]: Start isDeterministic. Operand 130663 states and 243229 transitions. [2023-11-28 23:56:16,191 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:56:16,191 INFO L218 hiAutomatonCegarLoop]: Abstraction has 130663 states and 243229 transitions. [2023-11-28 23:56:16,261 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130663 states and 243229 transitions. [2023-11-28 23:56:17,225 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130663 to 65364. [2023-11-28 23:56:17,278 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65364 states, 65364 states have (on average 1.8612997980539747) internal successors, (121662), 65363 states have internal predecessors, (121662), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:17,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65364 states to 65364 states and 121662 transitions. [2023-11-28 23:56:17,482 INFO L240 hiAutomatonCegarLoop]: Abstraction has 65364 states and 121662 transitions. [2023-11-28 23:56:17,482 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-28 23:56:17,483 INFO L428 stractBuchiCegarLoop]: Abstraction has 65364 states and 121662 transitions. [2023-11-28 23:56:17,483 INFO L335 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2023-11-28 23:56:17,483 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 65364 states and 121662 transitions. [2023-11-28 23:56:17,694 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 31492 [2023-11-28 23:56:17,694 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:56:17,694 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:56:17,697 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:17,698 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:17,698 INFO L748 eck$LassoCheckResult]: Stem: 1105907#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1105908#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1111053#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1110715#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 1107148#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 1107149#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1108863#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1108864#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1111654#L2208 assume !(0 == getOrigin_~person#1); 1111169#L2212 assume !(1 == getOrigin_~person#1); 1108746#L2216 assume !(2 == getOrigin_~person#1); 1108747#L2220 assume !(3 == getOrigin_~person#1); 1109908#L2224 assume !(4 == getOrigin_~person#1); 1105798#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1105799#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1108185#L3174 assume !(0 == initPersonOnFloor_~floor#1); 1108186#L3201 assume 1 == initPersonOnFloor_~floor#1; 1106636#L3202 assume !(0 == initPersonOnFloor_~person#1); 1106637#L3205 assume !(1 == initPersonOnFloor_~person#1); 1107416#L3208 assume !(2 == initPersonOnFloor_~person#1); 1111492#L3211 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 1108140#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1110776#L2304 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1107233#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1107234#L2966 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1106360#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1107080#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1106555#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1106290#L2208-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1106291#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1111844#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 1111843#L3201-1 assume 1 == initPersonOnFloor_~floor#1; 1110486#L3202-2 assume !(0 == initPersonOnFloor_~person#1); 1108651#L3205-2 assume !(1 == initPersonOnFloor_~person#1); 1108652#L3208-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1105679#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1107343#L2304-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1107152#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1107852#L2966-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1107853#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1111131#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1110882#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1110883#L2899 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1110257#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1110258#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 1111874#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1111871#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 1111535#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1106173#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 1106174#L1578 assume !(0 != timeShift_~tmp___9~2#1); 1107780#L1669 assume !(1 == ~doorState~0); 1107782#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1107747#L2899-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1107748#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1107809#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 1107810#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1110970#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 1109030#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 1109031#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1109844#L1337 assume !(1 == ~currentHeading~0); 1107427#L1347 assume !(0 == ~currentFloorID~0); 1107428#L1347-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1111742#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1108946#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1107927#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 1107928#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1111702#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1128407#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 1128354#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1107042#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1111710#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1111711#L2607-2 assume !false; 1136290#L2608 [2023-11-28 23:56:17,699 INFO L750 eck$LassoCheckResult]: Loop: 1136290#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1157168#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 1157167#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 1157166#L2615 assume 1 != cleanup_~tmp___0~12#1; 1157165#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1157164#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1157163#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1153830#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 1153820#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 1153819#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 1153818#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1153817#L2899-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1138962#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1153814#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 1153812#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 1153810#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1153811#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 1153122#L705-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 1153119#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 1153116#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1153111#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 1153108#L1578-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1153109#L1580-2 assume !(0 != ~persons_0~0); 1157815#L1580-3 assume !(0 != ~persons_1~0); 1157770#L1594-1 assume !(0 != ~persons_2~0); 1157743#L1608-1 assume !(0 != ~persons_3~0); 1157722#L1622-1 assume !(0 != ~persons_4~0); 1157713#L1636-1 assume !(0 != ~persons_5~0); 1157707#L1650-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1157547#L2994-12 assume 0 == isPersonOnFloor_~floor#1; 1157520#L2995-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1157506#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 1157504#L1479-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 1157502#L1479-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1157501#L2994-14 assume 0 == isPersonOnFloor_~floor#1; 1157485#L2995-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1157466#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret66#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret66#1;havoc processWaitingOnFloor_#t~ret66#1; 1157458#L1492-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1157455#L1492-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1157454#L2994-16 assume 0 == isPersonOnFloor_~floor#1; 1157435#L2995-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1157408#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret68#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret68#1;havoc processWaitingOnFloor_#t~ret68#1; 1157406#L1505-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1157404#L1505-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1157402#L2994-18 assume 0 == isPersonOnFloor_~floor#1; 1157326#L2995-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1157312#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret70#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret70#1;havoc processWaitingOnFloor_#t~ret70#1; 1157303#L1518-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1157301#L1518-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1157296#L2994-20 assume 0 == isPersonOnFloor_~floor#1; 1157270#L2995-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1157256#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret72#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret72#1;havoc processWaitingOnFloor_#t~ret72#1; 1157253#L1531-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1157248#L1531-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1157246#L2994-22 assume 0 == isPersonOnFloor_~floor#1; 1157221#L2995-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1157207#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret74#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret74#1;havoc processWaitingOnFloor_#t~ret74#1; 1157205#L1544-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1157203#L1544-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1157196#L2934-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1157193#L2946-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 1157192#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1157189#L659-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1157186#L671-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 1156706#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1156707#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 1153900#L2342-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1153901#L2343-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1153895#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 1153896#L2347-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1153877#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1157170#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1157169#L2607-2 assume !false; 1136290#L2608 [2023-11-28 23:56:17,699 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:56:17,700 INFO L85 PathProgramCache]: Analyzing trace with hash -8409081, now seen corresponding path program 1 times [2023-11-28 23:56:17,700 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:56:17,700 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [323497874] [2023-11-28 23:56:17,700 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:56:17,700 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:56:17,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:56:17,812 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:56:17,812 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:56:17,812 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [323497874] [2023-11-28 23:56:17,812 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [323497874] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:56:17,812 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:56:17,812 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-28 23:56:17,813 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [13206410] [2023-11-28 23:56:17,813 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:56:17,813 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:56:17,814 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:56:17,814 INFO L85 PathProgramCache]: Analyzing trace with hash -1584334940, now seen corresponding path program 6 times [2023-11-28 23:56:17,814 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:56:17,814 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [69587489] [2023-11-28 23:56:17,814 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:56:17,814 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:56:17,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:56:17,936 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:56:17,936 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:56:17,936 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [69587489] [2023-11-28 23:56:17,936 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [69587489] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:56:17,936 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:56:17,937 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-28 23:56:17,937 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1756595759] [2023-11-28 23:56:17,937 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:56:17,937 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:56:17,937 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:56:17,938 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-28 23:56:17,938 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-28 23:56:17,938 INFO L87 Difference]: Start difference. First operand 65364 states and 121662 transitions. cyclomatic complexity: 56307 Second operand has 4 states, 4 states have (on average 18.0) internal successors, (72), 4 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:18,421 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:56:18,421 INFO L93 Difference]: Finished difference Result 65365 states and 121657 transitions. [2023-11-28 23:56:18,421 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 65365 states and 121657 transitions. [2023-11-28 23:56:18,968 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 31492 [2023-11-28 23:56:19,146 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 65365 states to 65365 states and 121657 transitions. [2023-11-28 23:56:19,146 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 43896 [2023-11-28 23:56:19,171 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 43896 [2023-11-28 23:56:19,171 INFO L73 IsDeterministic]: Start isDeterministic. Operand 65365 states and 121657 transitions. [2023-11-28 23:56:19,173 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:56:19,173 INFO L218 hiAutomatonCegarLoop]: Abstraction has 65365 states and 121657 transitions. [2023-11-28 23:56:19,207 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65365 states and 121657 transitions. [2023-11-28 23:56:19,686 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65365 to 65364. [2023-11-28 23:56:19,735 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65364 states, 65364 states have (on average 1.861208004406095) internal successors, (121656), 65363 states have internal predecessors, (121656), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:20,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65364 states to 65364 states and 121656 transitions. [2023-11-28 23:56:20,189 INFO L240 hiAutomatonCegarLoop]: Abstraction has 65364 states and 121656 transitions. [2023-11-28 23:56:20,190 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-28 23:56:20,190 INFO L428 stractBuchiCegarLoop]: Abstraction has 65364 states and 121656 transitions. [2023-11-28 23:56:20,190 INFO L335 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2023-11-28 23:56:20,191 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 65364 states and 121656 transitions. [2023-11-28 23:56:20,340 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 31492 [2023-11-28 23:56:20,341 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:56:20,341 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:56:20,342 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:20,343 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:20,343 INFO L748 eck$LassoCheckResult]: Stem: 1236650#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1236651#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1241659#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1241330#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 1237888#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 1237889#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1239562#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1239563#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1242199#L2208 assume !(0 == getOrigin_~person#1); 1241761#L2212 assume !(1 == getOrigin_~person#1); 1239446#L2216 assume !(2 == getOrigin_~person#1); 1239447#L2220 assume !(3 == getOrigin_~person#1); 1240562#L2224 assume !(4 == getOrigin_~person#1); 1236541#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1236542#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1238899#L3174 assume !(0 == initPersonOnFloor_~floor#1); 1238900#L3201 assume 1 == initPersonOnFloor_~floor#1; 1237378#L3202 assume !(0 == initPersonOnFloor_~person#1); 1237379#L3205 assume !(1 == initPersonOnFloor_~person#1); 1238148#L3208 assume !(2 == initPersonOnFloor_~person#1); 1242061#L3211 assume !(3 == initPersonOnFloor_~person#1); 1238929#L3214 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 1238855#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1241385#L2304 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1237973#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1237974#L2966 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1237103#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1237820#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1237299#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1237031#L2208-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1237032#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1242353#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 1242352#L3201-1 assume 1 == initPersonOnFloor_~floor#1; 1241120#L3202-2 assume !(0 == initPersonOnFloor_~person#1); 1239351#L3205-2 assume !(1 == initPersonOnFloor_~person#1); 1239352#L3208-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1236422#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1238078#L2304-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1237892#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1238576#L2966-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1238577#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1241728#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1241490#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1241491#L2899 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1240893#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1240894#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 1242383#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1242380#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 1242101#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1236913#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 1236914#L1578 assume !(0 != timeShift_~tmp___9~2#1); 1238504#L1669 assume !(1 == ~doorState~0); 1238506#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1242038#L2899-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1254928#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1254925#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 1241577#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1241578#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 1255976#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 1255974#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1255972#L1337 assume !(1 == ~currentHeading~0); 1255973#L1347 assume !(0 == ~currentFloorID~0); 1239419#L1347-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1255099#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1263573#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1263572#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 1242245#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1242067#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1242068#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 1240523#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1237779#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1238232#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1242248#L2607-2 assume !false; 1265646#L2608 [2023-11-28 23:56:20,343 INFO L750 eck$LassoCheckResult]: Loop: 1265646#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1284548#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 1284547#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 1284546#L2615 assume 1 != cleanup_~tmp___0~12#1; 1284545#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1284544#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1284543#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1284527#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 1284519#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 1283398#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 1283396#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1283390#L2899-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1272076#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1283354#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 1283352#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 1283351#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1283350#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 1283306#L705-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 1283294#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 1283289#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1283287#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 1283284#L1578-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1283285#L1580-2 assume !(0 != ~persons_0~0); 1285402#L1580-3 assume !(0 != ~persons_1~0); 1285396#L1594-1 assume !(0 != ~persons_2~0); 1285362#L1608-1 assume !(0 != ~persons_3~0); 1285358#L1622-1 assume !(0 != ~persons_4~0); 1285322#L1636-1 assume !(0 != ~persons_5~0); 1285321#L1650-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1285320#L2994-12 assume 0 == isPersonOnFloor_~floor#1; 1285291#L2995-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1285277#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 1285275#L1479-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 1285273#L1479-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1285272#L2994-14 assume 0 == isPersonOnFloor_~floor#1; 1285247#L2995-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1285227#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret66#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret66#1;havoc processWaitingOnFloor_#t~ret66#1; 1285225#L1492-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1285223#L1492-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1285216#L2994-16 assume 0 == isPersonOnFloor_~floor#1; 1285199#L2995-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1285172#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret68#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret68#1;havoc processWaitingOnFloor_#t~ret68#1; 1285170#L1505-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1285168#L1505-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1285167#L2994-18 assume 0 == isPersonOnFloor_~floor#1; 1285061#L2995-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1285059#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret70#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret70#1;havoc processWaitingOnFloor_#t~ret70#1; 1285057#L1518-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1285055#L1518-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1285048#L2994-20 assume 0 == isPersonOnFloor_~floor#1; 1285000#L2995-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1284991#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret72#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret72#1;havoc processWaitingOnFloor_#t~ret72#1; 1284989#L1531-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1284987#L1531-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1284981#L2994-22 assume 0 == isPersonOnFloor_~floor#1; 1284610#L2995-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1284596#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret74#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret74#1;havoc processWaitingOnFloor_#t~ret74#1; 1284594#L1544-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1284592#L1544-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1284589#L2934-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1284586#L2946-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 1284585#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1284582#L659-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1284579#L671-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 1284578#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1284577#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 1284576#L2342-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1284574#L2343-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1284575#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 1284552#L2347-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1284551#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1284550#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1284549#L2607-2 assume !false; 1265646#L2608 [2023-11-28 23:56:20,344 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:56:20,344 INFO L85 PathProgramCache]: Analyzing trace with hash -1326780830, now seen corresponding path program 1 times [2023-11-28 23:56:20,344 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:56:20,344 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1559691583] [2023-11-28 23:56:20,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:56:20,345 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:56:20,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:56:20,441 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:56:20,441 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:56:20,441 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1559691583] [2023-11-28 23:56:20,442 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1559691583] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:56:20,442 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:56:20,442 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-28 23:56:20,442 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [949915387] [2023-11-28 23:56:20,442 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:56:20,442 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:56:20,443 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:56:20,443 INFO L85 PathProgramCache]: Analyzing trace with hash -1584334940, now seen corresponding path program 7 times [2023-11-28 23:56:20,443 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:56:20,443 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1901355403] [2023-11-28 23:56:20,443 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:56:20,443 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:56:20,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:56:20,541 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:56:20,541 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:56:20,542 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1901355403] [2023-11-28 23:56:20,542 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1901355403] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:56:20,542 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:56:20,542 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-28 23:56:20,542 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1622574729] [2023-11-28 23:56:20,542 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:56:20,542 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:56:20,542 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:56:20,543 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-28 23:56:20,543 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2023-11-28 23:56:20,543 INFO L87 Difference]: Start difference. First operand 65364 states and 121656 transitions. cyclomatic complexity: 56301 Second operand has 8 states, 8 states have (on average 9.125) internal successors, (73), 8 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:24,995 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:56:24,995 INFO L93 Difference]: Finished difference Result 232155 states and 429394 transitions. [2023-11-28 23:56:24,996 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 232155 states and 429394 transitions. [2023-11-28 23:56:26,159 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 115057 [2023-11-28 23:56:27,218 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 232155 states to 232155 states and 429394 transitions. [2023-11-28 23:56:27,219 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 156043 [2023-11-28 23:56:27,327 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 156043 [2023-11-28 23:56:27,327 INFO L73 IsDeterministic]: Start isDeterministic. Operand 232155 states and 429394 transitions. [2023-11-28 23:56:27,334 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:56:27,334 INFO L218 hiAutomatonCegarLoop]: Abstraction has 232155 states and 429394 transitions. [2023-11-28 23:56:27,485 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 232155 states and 429394 transitions. [2023-11-28 23:56:29,001 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 232155 to 129365. [2023-11-28 23:56:29,095 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 129365 states, 129365 states have (on average 1.8610752521934062) internal successors, (240758), 129364 states have internal predecessors, (240758), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:29,810 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129365 states to 129365 states and 240758 transitions. [2023-11-28 23:56:29,810 INFO L240 hiAutomatonCegarLoop]: Abstraction has 129365 states and 240758 transitions. [2023-11-28 23:56:29,810 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2023-11-28 23:56:29,812 INFO L428 stractBuchiCegarLoop]: Abstraction has 129365 states and 240758 transitions. [2023-11-28 23:56:29,812 INFO L335 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2023-11-28 23:56:29,812 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 129365 states and 240758 transitions. [2023-11-28 23:56:30,092 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 62222 [2023-11-28 23:56:30,092 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:56:30,092 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:56:30,094 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:30,094 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:30,094 INFO L748 eck$LassoCheckResult]: Stem: 1534212#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1534213#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1539325#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1538977#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 1535461#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 1535462#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1537157#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1537158#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1539943#L2208 assume !(0 == getOrigin_~person#1); 1539440#L2212 assume !(1 == getOrigin_~person#1); 1537038#L2216 assume !(2 == getOrigin_~person#1); 1537039#L2220 assume !(3 == getOrigin_~person#1); 1538202#L2224 assume !(4 == getOrigin_~person#1); 1534109#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1534110#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1536480#L3174 assume !(0 == initPersonOnFloor_~floor#1); 1536481#L3201 assume 1 == initPersonOnFloor_~floor#1; 1534949#L3202 assume !(0 == initPersonOnFloor_~person#1); 1534950#L3205 assume !(1 == initPersonOnFloor_~person#1); 1535725#L3208 assume !(2 == initPersonOnFloor_~person#1); 1539789#L3211 assume !(3 == initPersonOnFloor_~person#1); 1536511#L3214 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 1536433#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1539040#L2304 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1535540#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1535541#L2966 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1535396#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1535397#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1534862#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1534596#L2208-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1534597#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1540151#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 1540150#L3201-1 assume 1 == initPersonOnFloor_~floor#1; 1539076#L3202-2 assume !(0 == initPersonOnFloor_~person#1); 1536945#L3205-2 assume !(1 == initPersonOnFloor_~person#1); 1536946#L3208-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1537666#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1537667#L2304-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1539357#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1539358#L2966-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1536151#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1539395#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1539396#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1539959#L2899 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1538543#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1538544#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 1534813#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1534814#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 1540333#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1565859#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 1565857#L1578 assume !(0 != timeShift_~tmp___9~2#1); 1565855#L1669 assume !(1 == ~doorState~0); 1565854#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1565853#L2899-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1565852#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1565851#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 1565849#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1565848#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 1565826#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 1565815#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1565804#L1337 assume !(1 == ~currentHeading~0); 1535734#L1347 assume !(0 == ~currentFloorID~0); 1535385#L1347-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1535386#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1593338#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1593337#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 1593336#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1593333#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1593329#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 1593319#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1593316#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1540006#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1540007#L2607-2 assume !false; 1593223#L2608 [2023-11-28 23:56:30,095 INFO L750 eck$LassoCheckResult]: Loop: 1593223#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 1626855#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 1626854#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 1626853#L2615 assume 1 != cleanup_~tmp___0~12#1; 1626852#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1626851#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1626850#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 1613219#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 1612974#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 1612960#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 1610229#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1610227#L2899-70 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1598439#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1610178#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 1610177#L1425-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1610176#getCurrentFloorID_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 1610174#L1429-1 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 1610172#L1399-2 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1610171#getCurrentFloorID_returnLabel#8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 1610170#L705-4 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 1609929#buttonForFloorIsPressed_returnLabel#5 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 1609926#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#3 stopRequestedAtCurrentFloor_#t~ret62#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret62#1;havoc stopRequestedAtCurrentFloor_#t~ret62#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1609924#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 1609921#L1578-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1609922#L1580-2 assume !(0 != ~persons_0~0); 1627546#L1580-3 assume !(0 != ~persons_1~0); 1627540#L1594-1 assume !(0 != ~persons_2~0); 1627506#L1608-1 assume !(0 != ~persons_3~0); 1627502#L1622-1 assume !(0 != ~persons_4~0); 1627466#L1636-1 assume !(0 != ~persons_5~0); 1627465#L1650-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1627464#L2994-12 assume 0 == isPersonOnFloor_~floor#1; 1627439#L2995-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1627418#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 1627410#L1479-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 1627406#L1479-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1627405#L2994-14 assume 0 == isPersonOnFloor_~floor#1; 1627320#L2995-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1627211#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret66#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret66#1;havoc processWaitingOnFloor_#t~ret66#1; 1627209#L1492-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1627207#L1492-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1627206#L2994-16 assume 0 == isPersonOnFloor_~floor#1; 1627195#L2995-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1627167#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret68#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret68#1;havoc processWaitingOnFloor_#t~ret68#1; 1627165#L1505-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1627163#L1505-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1627161#L2994-18 assume 0 == isPersonOnFloor_~floor#1; 1627129#L2995-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1627122#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret70#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret70#1;havoc processWaitingOnFloor_#t~ret70#1; 1627119#L1518-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1627117#L1518-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1627109#L2994-20 assume 0 == isPersonOnFloor_~floor#1; 1627046#L2995-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1627037#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret72#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret72#1;havoc processWaitingOnFloor_#t~ret72#1; 1626965#L1531-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1626957#L1531-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1626955#L2994-22 assume 0 == isPersonOnFloor_~floor#1; 1626919#L2995-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1626900#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret74#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret74#1;havoc processWaitingOnFloor_#t~ret74#1; 1626897#L1544-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1626895#L1544-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1626893#L2934-26 assume !(0 == resetCallOnFloor_~floorID#1); 1626891#L2937-26 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 1626888#L2946-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 1626887#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1626884#L659-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1626881#L671-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 1626880#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1626879#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 1626878#L2342-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1626875#L2343-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1626870#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 1626859#L2347-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1626858#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1626857#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1626856#L2607-2 assume !false; 1593223#L2608 [2023-11-28 23:56:30,095 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:56:30,095 INFO L85 PathProgramCache]: Analyzing trace with hash -1326780830, now seen corresponding path program 2 times [2023-11-28 23:56:30,095 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:56:30,095 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [839999961] [2023-11-28 23:56:30,095 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:56:30,095 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:56:30,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:56:30,186 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:56:30,187 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:56:30,187 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [839999961] [2023-11-28 23:56:30,187 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [839999961] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:56:30,187 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:56:30,187 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-28 23:56:30,188 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1021109545] [2023-11-28 23:56:30,188 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:56:30,188 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:56:30,189 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:56:30,189 INFO L85 PathProgramCache]: Analyzing trace with hash 816250755, now seen corresponding path program 1 times [2023-11-28 23:56:30,189 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:56:30,189 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [966803547] [2023-11-28 23:56:30,189 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:56:30,190 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:56:30,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:56:30,291 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:56:30,291 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:56:30,291 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [966803547] [2023-11-28 23:56:30,291 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [966803547] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:56:30,291 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:56:30,291 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-28 23:56:30,292 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1247519974] [2023-11-28 23:56:30,292 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:56:30,292 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:56:30,292 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:56:30,292 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-28 23:56:30,293 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-28 23:56:30,293 INFO L87 Difference]: Start difference. First operand 129365 states and 240758 transitions. cyclomatic complexity: 111402 Second operand has 4 states, 4 states have (on average 18.25) internal successors, (73), 4 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:30,994 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:56:30,994 INFO L93 Difference]: Finished difference Result 129367 states and 240749 transitions. [2023-11-28 23:56:30,994 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 129367 states and 240749 transitions. [2023-11-28 23:56:31,962 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 62222 [2023-11-28 23:56:32,424 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 129367 states to 129367 states and 240749 transitions. [2023-11-28 23:56:32,424 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 86918 [2023-11-28 23:56:32,488 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 86918 [2023-11-28 23:56:32,488 INFO L73 IsDeterministic]: Start isDeterministic. Operand 129367 states and 240749 transitions. [2023-11-28 23:56:32,492 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:56:32,492 INFO L218 hiAutomatonCegarLoop]: Abstraction has 129367 states and 240749 transitions. [2023-11-28 23:56:32,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 129367 states and 240749 transitions. [2023-11-28 23:56:33,887 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 129367 to 129365. [2023-11-28 23:56:33,981 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 129365 states, 129365 states have (on average 1.8609902214663936) internal successors, (240747), 129364 states have internal predecessors, (240747), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:56:34,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129365 states to 129365 states and 240747 transitions. [2023-11-28 23:56:34,307 INFO L240 hiAutomatonCegarLoop]: Abstraction has 129365 states and 240747 transitions. [2023-11-28 23:56:34,308 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-28 23:56:34,309 INFO L428 stractBuchiCegarLoop]: Abstraction has 129365 states and 240747 transitions. [2023-11-28 23:56:34,309 INFO L335 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2023-11-28 23:56:34,309 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 129365 states and 240747 transitions. [2023-11-28 23:56:34,984 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 62222 [2023-11-28 23:56:34,984 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:56:34,984 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:56:34,986 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:34,986 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:56:34,986 INFO L748 eck$LassoCheckResult]: Stem: 1792952#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1792953#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 1798084#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1797726#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 1794198#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 1794199#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 1795902#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1795903#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1798680#L2208 assume !(0 == getOrigin_~person#1); 1798202#L2212 assume !(1 == getOrigin_~person#1); 1795783#L2216 assume !(2 == getOrigin_~person#1); 1795784#L2220 assume !(3 == getOrigin_~person#1); 1796937#L2224 assume !(4 == getOrigin_~person#1); 1792850#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1792851#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1795225#L3174 assume !(0 == initPersonOnFloor_~floor#1); 1795226#L3201 assume 1 == initPersonOnFloor_~floor#1; 1793687#L3202 assume !(0 == initPersonOnFloor_~person#1); 1793688#L3205 assume !(1 == initPersonOnFloor_~person#1); 1794462#L3208 assume !(2 == initPersonOnFloor_~person#1); 1798524#L3211 assume !(3 == initPersonOnFloor_~person#1); 1795255#L3214 assume !(4 == initPersonOnFloor_~person#1); 1795177#L3217 assume !(5 == initPersonOnFloor_~person#1); 1795178#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1797789#L2304 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1794277#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1794278#L2966 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1794133#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1794134#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1793600#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1793601#L2208-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1798875#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1798876#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 1798869#L3201-1 assume 1 == initPersonOnFloor_~floor#1; 1797829#L3202-2 assume !(0 == initPersonOnFloor_~person#1); 1795693#L3205-2 assume !(1 == initPersonOnFloor_~person#1); 1795694#L3208-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1796415#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1796416#L2304-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1798117#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1798118#L2966-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1794895#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1798162#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1798163#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1798697#L2899 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1797271#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1797272#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 1793552#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1793553#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 1827439#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1827440#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 1827788#L1578 assume !(0 != timeShift_~tmp___9~2#1); 1827787#L1669 assume !(1 == ~doorState~0); 1803180#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1803179#L2899-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1803178#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1801733#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 1801734#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1798802#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 1796058#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 1796059#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1796873#L1337 assume !(1 == ~currentHeading~0); 1794471#L1347 assume !(0 == ~currentFloorID~0); 1794122#L1347-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1794123#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1795439#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1794970#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 1794971#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1849433#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1849431#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 1849404#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1849389#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1798737#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1798738#L2607-2 assume !false; 1849446#L2608 WARNING: YOUR LOGFILE WAS TOO LONG, SOME LINES IN THE MIDDLE WERE REMOVED. [2023-11-28 23:57:45,744 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [608477689] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:57:45,744 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:57:45,744 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-28 23:57:45,745 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1522535724] [2023-11-28 23:57:45,745 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:57:45,745 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:57:45,745 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:57:45,745 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-28 23:57:45,745 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-28 23:57:45,745 INFO L87 Difference]: Start difference. First operand 75235 states and 127705 transitions. cyclomatic complexity: 52475 Second operand has 6 states, 6 states have (on average 15.166666666666666) internal successors, (91), 5 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:57:48,511 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:57:48,511 INFO L93 Difference]: Finished difference Result 284000 states and 490094 transitions. [2023-11-28 23:57:48,511 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 284000 states and 490094 transitions. [2023-11-28 23:57:49,888 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 133412 [2023-11-28 23:57:50,681 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 284000 states to 284000 states and 490094 transitions. [2023-11-28 23:57:50,681 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 181760 [2023-11-28 23:57:50,783 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 181760 [2023-11-28 23:57:50,783 INFO L73 IsDeterministic]: Start isDeterministic. Operand 284000 states and 490094 transitions. [2023-11-28 23:57:50,797 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:57:50,797 INFO L218 hiAutomatonCegarLoop]: Abstraction has 284000 states and 490094 transitions. [2023-11-28 23:57:51,295 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 284000 states and 490094 transitions. [2023-11-28 23:57:52,811 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 284000 to 149119. [2023-11-28 23:57:52,882 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 149119 states, 149119 states have (on average 1.698140411349325) internal successors, (253225), 149118 states have internal predecessors, (253225), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:57:53,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149119 states to 149119 states and 253225 transitions. [2023-11-28 23:57:53,157 INFO L240 hiAutomatonCegarLoop]: Abstraction has 149119 states and 253225 transitions. [2023-11-28 23:57:53,158 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-28 23:57:53,158 INFO L428 stractBuchiCegarLoop]: Abstraction has 149119 states and 253225 transitions. [2023-11-28 23:57:53,158 INFO L335 stractBuchiCegarLoop]: ======== Iteration 30 ============ [2023-11-28 23:57:53,158 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 149119 states and 253225 transitions. [2023-11-28 23:57:53,462 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 79352 [2023-11-28 23:57:53,462 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:57:53,462 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:57:53,468 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:57:53,469 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:57:53,469 INFO L748 eck$LassoCheckResult]: Stem: 5932244#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 5932245#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 5934872#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5933735#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 5933736#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 5934159#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 5936363#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 5936373#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 5936943#L2208 assume !(0 == getOrigin_~person#1); 5935282#L2212 assume !(1 == getOrigin_~person#1); 5935283#L2216 assume !(2 == getOrigin_~person#1); 5936242#L2220 assume !(3 == getOrigin_~person#1); 5936990#L2224 assume !(4 == getOrigin_~person#1); 5932071#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 5932072#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5932268#L3174 assume !(0 == initPersonOnFloor_~floor#1); 5935619#L3201 assume 1 == initPersonOnFloor_~floor#1; 5933342#L3202 assume !(0 == initPersonOnFloor_~person#1); 5933343#L3205 assume !(1 == initPersonOnFloor_~person#1); 5934571#L3208 assume !(2 == initPersonOnFloor_~person#1); 5936359#L3211 assume !(3 == initPersonOnFloor_~person#1); 5935658#L3214 assume !(4 == initPersonOnFloor_~person#1); 5935548#L3217 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 5933941#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 5933942#L2304 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 5935605#L2307 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 5932735#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 5934309#L2966 assume !(0 == callOnFloor_~floorID#1); 5932488#L2969 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 5932489#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 5934049#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 5933238#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 5933239#L2208-1 assume !(0 == getOrigin_~person#1); 5937607#L2212-1 assume !(1 == getOrigin_~person#1); 5937422#L2216-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 5933149#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5933150#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 5937605#L3201-1 assume !(1 == initPersonOnFloor_~floor#1); 5931864#L3228-1 assume 2 == initPersonOnFloor_~floor#1; 5931865#L3229-2 assume !(0 == initPersonOnFloor_~person#1); 5937604#L3232-2 assume !(1 == initPersonOnFloor_~person#1); 5937602#L3235-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 5937601#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 5934467#L2304-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 5934167#L2307-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 5934168#L2310-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 5933001#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 5935012#L2966-2 assume !(0 == callOnFloor_~floorID#1); 5935148#L2969-2 assume !(1 == callOnFloor_~floorID#1); 5936587#L2972-2 assume !(2 == callOnFloor_~floorID#1); 5935776#L2975-2 assume !(3 == callOnFloor_~floorID#1); 5935470#L2978-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 5935471#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 5935142#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 5934274#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5934275#L2899 assume !(0 == isFloorCalling_~floorID#1); 5937019#L2903 assume !(1 == isFloorCalling_~floorID#1); 5937587#L2907 assume !(2 == isFloorCalling_~floorID#1); 5937586#L2911 assume !(3 == isFloorCalling_~floorID#1); 5937585#L2915 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5937584#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 5937583#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 5937581#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 5935321#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 5935322#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 5932617#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 5932618#L1578 assume !(0 != timeShift_~tmp___9~2#1); 5935023#L1669 assume !(1 == ~doorState~0); 5941291#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5934988#L2899-3 assume !(0 == isFloorCalling_~floorID#1); 5934989#L2903-3 assume !(1 == isFloorCalling_~floorID#1); 5937332#L2907-3 assume !(2 == isFloorCalling_~floorID#1); 5937333#L2911-3 assume !(3 == isFloorCalling_~floorID#1); 5934964#L2915-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5934965#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 5935056#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 5935057#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 5937377#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 5936899#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 5937386#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 5937388#L1337 assume !(1 == ~currentHeading~0); 5934578#L1347 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5934579#L1347-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5941258#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 5941253#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 5941244#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 5941240#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 5941226#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 5941212#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 5941190#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 5941185#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 5941182#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 5941179#L2607-2 assume !false; 5941180#L2608 [2023-11-28 23:57:53,469 INFO L750 eck$LassoCheckResult]: Loop: 5941180#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 6009837#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 6009835#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 6009821#L2615 assume 1 != cleanup_~tmp___0~12#1; 6009800#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6009798#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6009797#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 6009795#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 6009796#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 6011082#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 6011081#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6011080#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 6011079#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 6011078#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 6011077#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 6011076#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6011075#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 6011074#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 6011072#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 6011073#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 6015547#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 6015545#L705-6 assume !(0 == buttonForFloorIsPressed_~floorID#1); 6015543#L709-6 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 6015540#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 6015537#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 6000562#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 6000563#L1578-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 6011066#L1580-2 assume !(0 != ~persons_0~0); 6011056#L1580-3 assume !(0 != ~persons_1~0); 6011050#L1594-1 assume !(0 != ~persons_2~0); 6011016#L1608-1 assume !(0 != ~persons_3~0); 6011012#L1622-1 assume !(0 != ~persons_4~0); 6010976#L1636-1 assume !(0 != ~persons_5~0); 6010975#L1650-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6010973#L2994-12 assume 0 == isPersonOnFloor_~floor#1; 6010759#L2995-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6010738#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 6010736#L1479-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 6010734#L1479-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6010732#L2994-14 assume 0 == isPersonOnFloor_~floor#1; 6010733#L2995-7 assume !(0 == isPersonOnFloor_~person#1); 6010710#L2999-7 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6010695#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret66#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret66#1;havoc processWaitingOnFloor_#t~ret66#1; 6010692#L1492-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 6010690#L1492-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6010688#L2994-16 assume 0 == isPersonOnFloor_~floor#1; 6010689#L2995-8 assume !(0 == isPersonOnFloor_~person#1); 6012268#L2999-8 assume !(1 == isPersonOnFloor_~person#1); 6010674#L3003-8 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6010653#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret68#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret68#1;havoc processWaitingOnFloor_#t~ret68#1; 6010650#L1505-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 6010648#L1505-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6010646#L2994-18 assume 0 == isPersonOnFloor_~floor#1; 6010639#L2995-9 assume !(0 == isPersonOnFloor_~person#1); 6010637#L2999-9 assume !(1 == isPersonOnFloor_~person#1); 6010636#L3003-9 assume !(2 == isPersonOnFloor_~person#1); 6010635#L3007-9 assume 3 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_3_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6010629#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret70#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret70#1;havoc processWaitingOnFloor_#t~ret70#1; 6010216#L1518-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 6010213#L1518-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6010210#L2994-20 assume !(0 == isPersonOnFloor_~floor#1); 6010207#L3027-20 assume !(1 == isPersonOnFloor_~floor#1); 6010204#L3060-20 assume !(2 == isPersonOnFloor_~floor#1); 6010201#L3093-20 assume !(3 == isPersonOnFloor_~floor#1); 6010198#L3126-30 assume !(4 == isPersonOnFloor_~floor#1); 6010177#L3126-32 isPersonOnFloor_~retValue_acc~28#1 := 0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6010172#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret72#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret72#1;havoc processWaitingOnFloor_#t~ret72#1; 6010170#L1531-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 6010168#L1531-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6010165#L2994-22 assume !(0 == isPersonOnFloor_~floor#1); 6010161#L3027-22 assume !(1 == isPersonOnFloor_~floor#1); 6010159#L3060-22 assume !(2 == isPersonOnFloor_~floor#1); 6010160#L3093-22 assume !(3 == isPersonOnFloor_~floor#1); 6010212#L3126-33 assume !(4 == isPersonOnFloor_~floor#1); 6010103#L3126-35 isPersonOnFloor_~retValue_acc~28#1 := 0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6010086#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret74#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret74#1;havoc processWaitingOnFloor_#t~ret74#1; 6010084#L1544-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 6009960#L1544-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 6009878#L2934-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 6009874#L2946-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 6009872#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 6009868#L659-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 6009864#L671-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 6009862#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 6009861#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 6009860#L2342-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 6009857#L2343-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 6009852#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 6009841#L2347-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 6009840#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6009839#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 6009838#L2607-2 assume !false; 5941180#L2608 [2023-11-28 23:57:53,470 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:57:53,470 INFO L85 PathProgramCache]: Analyzing trace with hash -166285633, now seen corresponding path program 1 times [2023-11-28 23:57:53,470 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:57:53,470 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [596632586] [2023-11-28 23:57:53,470 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:57:53,471 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:57:53,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:57:53,538 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:57:53,539 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:57:53,539 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [596632586] [2023-11-28 23:57:53,539 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [596632586] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:57:53,539 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:57:53,539 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-28 23:57:53,539 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1469764202] [2023-11-28 23:57:53,539 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:57:53,540 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:57:53,540 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:57:53,540 INFO L85 PathProgramCache]: Analyzing trace with hash -1216393328, now seen corresponding path program 1 times [2023-11-28 23:57:53,540 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:57:53,540 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1555531043] [2023-11-28 23:57:53,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:57:53,541 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:57:53,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:57:53,597 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:57:53,597 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:57:53,597 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1555531043] [2023-11-28 23:57:53,597 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1555531043] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:57:53,598 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:57:53,598 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-28 23:57:53,598 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1444094423] [2023-11-28 23:57:53,598 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:57:53,598 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:57:53,598 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:57:53,599 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-28 23:57:53,599 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-28 23:57:53,599 INFO L87 Difference]: Start difference. First operand 149119 states and 253225 transitions. cyclomatic complexity: 104116 Second operand has 6 states, 6 states have (on average 15.333333333333334) internal successors, (92), 6 states have internal predecessors, (92), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:57:56,028 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:57:56,028 INFO L93 Difference]: Finished difference Result 203579 states and 345273 transitions. [2023-11-28 23:57:56,028 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 203579 states and 345273 transitions. [2023-11-28 23:57:56,846 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 109056 [2023-11-28 23:57:57,912 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 203579 states to 203579 states and 345273 transitions. [2023-11-28 23:57:57,912 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 131119 [2023-11-28 23:57:58,001 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 131119 [2023-11-28 23:57:58,002 INFO L73 IsDeterministic]: Start isDeterministic. Operand 203579 states and 345273 transitions. [2023-11-28 23:57:58,003 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:57:58,003 INFO L218 hiAutomatonCegarLoop]: Abstraction has 203579 states and 345273 transitions. [2023-11-28 23:57:58,127 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 203579 states and 345273 transitions. [2023-11-28 23:57:59,626 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 203579 to 181903. [2023-11-28 23:57:59,745 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 181903 states, 181903 states have (on average 1.7017256449866138) internal successors, (309549), 181902 states have internal predecessors, (309549), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:58:00,097 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 181903 states to 181903 states and 309549 transitions. [2023-11-28 23:58:00,098 INFO L240 hiAutomatonCegarLoop]: Abstraction has 181903 states and 309549 transitions. [2023-11-28 23:58:00,098 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-28 23:58:00,098 INFO L428 stractBuchiCegarLoop]: Abstraction has 181903 states and 309549 transitions. [2023-11-28 23:58:00,098 INFO L335 stractBuchiCegarLoop]: ======== Iteration 31 ============ [2023-11-28 23:58:00,098 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 181903 states and 309549 transitions. [2023-11-28 23:58:00,842 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 99412 [2023-11-28 23:58:00,842 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:58:00,842 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:58:00,846 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:00,846 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:00,846 INFO L748 eck$LassoCheckResult]: Stem: 6284947#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 6284948#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 6287520#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6286410#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 6286411#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 6286832#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 6288944#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6288951#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 6289457#L2208 assume !(0 == getOrigin_~person#1); 6287911#L2212 assume !(1 == getOrigin_~person#1); 6287912#L2216 assume !(2 == getOrigin_~person#1); 6288823#L2220 assume !(3 == getOrigin_~person#1); 6289506#L2224 assume !(4 == getOrigin_~person#1); 6284785#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 6284786#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6284981#L3174 assume !(0 == initPersonOnFloor_~floor#1); 6288232#L3201 assume 1 == initPersonOnFloor_~floor#1; 6286032#L3202 assume !(0 == initPersonOnFloor_~person#1); 6286033#L3205 assume !(1 == initPersonOnFloor_~person#1); 6287218#L3208 assume !(2 == initPersonOnFloor_~person#1); 6288936#L3211 assume !(3 == initPersonOnFloor_~person#1); 6288272#L3214 assume !(4 == initPersonOnFloor_~person#1); 6288170#L3217 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6286607#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6286608#L2304 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6288220#L2307 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 6285435#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6286972#L2966 assume !(0 == callOnFloor_~floorID#1); 6285197#L2969 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6285198#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 6290064#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 6290063#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 6285531#L2208-1 assume !(0 == getOrigin_~person#1); 6285532#L2212-1 assume !(1 == getOrigin_~person#1); 6287092#L2216-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 6290061#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6285377#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 6285378#L3201-1 assume !(1 == initPersonOnFloor_~floor#1); 6286744#L3228-1 assume 2 == initPersonOnFloor_~floor#1; 6286372#L3229-2 assume !(0 == initPersonOnFloor_~person#1); 6286373#L3232-2 assume !(1 == initPersonOnFloor_~person#1); 6284636#L3235-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6284637#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6287128#L2304-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6286841#L2307-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6286842#L2310-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6285696#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6287657#L2966-2 assume !(0 == callOnFloor_~floorID#1); 6287782#L2969-2 assume !(1 == callOnFloor_~floorID#1); 6289130#L2972-2 assume !(2 == callOnFloor_~floorID#1); 6288385#L2975-2 assume !(3 == callOnFloor_~floorID#1); 6288096#L2978-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 6288097#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 6287779#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 6286944#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6286945#L2899 assume !(0 == isFloorCalling_~floorID#1); 6289526#L2903 assume !(1 == isFloorCalling_~floorID#1); 6290041#L2907 assume !(2 == isFloorCalling_~floorID#1); 6290040#L2911 assume !(3 == isFloorCalling_~floorID#1); 6290039#L2915 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6290038#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 6290037#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 6290035#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 6287957#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 6287958#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 6285330#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 6285331#L1578 assume !(0 != timeShift_~tmp___9~2#1); 6287663#L1669 assume !(1 == ~doorState~0); 6287665#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6299931#L2899-3 assume !(0 == isFloorCalling_~floorID#1); 6299930#L2903-3 assume !(1 == isFloorCalling_~floorID#1); 6299929#L2907-3 assume !(2 == isFloorCalling_~floorID#1); 6299928#L2911-3 assume !(3 == isFloorCalling_~floorID#1); 6299927#L2915-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6299926#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 6299925#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 6299924#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 6299872#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 6299870#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 6299869#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 6289502#L1337 assume !(1 == ~currentHeading~0); 6289503#L1347 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6294001#L1347-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6293997#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 6293996#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 6293993#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 6293990#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 6293989#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 6293987#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 6293943#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 6293929#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6293908#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 6293896#L2607-2 assume !false; 6293897#L2608 [2023-11-28 23:58:00,847 INFO L750 eck$LassoCheckResult]: Loop: 6293897#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 6368237#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 6368235#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 6368233#L2615 assume 1 != cleanup_~tmp___0~12#1; 6368231#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6368227#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6368223#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 6368187#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 6368178#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 6368177#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 6368176#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6368175#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 6368174#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 6368173#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 6368172#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 6368171#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6368170#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 6368169#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 6368167#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 6368168#L1399-3 assume !(~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret55#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~15#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6368398#L2899-72 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6368395#isFloorCalling_returnLabel#73 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret55#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret55#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret55#1; 6368392#L1370-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~15#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~15#1; 6368393#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret55#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~15#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 6368831#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 6368832#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 6380125#L1578-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 6380123#L1580-2 assume !(0 != ~persons_0~0); 6380113#L1580-3 assume !(0 != ~persons_1~0); 6380107#L1594-1 assume !(0 != ~persons_2~0); 6380073#L1608-1 assume !(0 != ~persons_3~0); 6380069#L1622-1 assume !(0 != ~persons_4~0); 6380009#L1636-1 assume !(0 != ~persons_5~0); 6380008#L1650-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6380006#L2994-12 assume 0 == isPersonOnFloor_~floor#1; 6379992#L2995-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6379436#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 6379433#L1479-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 6379431#L1479-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6379426#L2994-14 assume 0 == isPersonOnFloor_~floor#1; 6379419#L2995-7 assume !(0 == isPersonOnFloor_~person#1); 6379403#L2999-7 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6378139#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret66#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret66#1;havoc processWaitingOnFloor_#t~ret66#1; 6378136#L1492-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 6378134#L1492-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6378132#L2994-16 assume 0 == isPersonOnFloor_~floor#1; 6378133#L2995-8 assume !(0 == isPersonOnFloor_~person#1); 6378142#L2999-8 assume !(1 == isPersonOnFloor_~person#1); 6378120#L3003-8 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6376364#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret68#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret68#1;havoc processWaitingOnFloor_#t~ret68#1; 6376361#L1505-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 6376359#L1505-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6376358#L2994-18 assume 0 == isPersonOnFloor_~floor#1; 6376356#L2995-9 assume !(0 == isPersonOnFloor_~person#1); 6376352#L2999-9 assume !(1 == isPersonOnFloor_~person#1); 6376345#L3003-9 assume !(2 == isPersonOnFloor_~person#1); 6376338#L3007-9 assume 3 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_3_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6374951#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret70#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret70#1;havoc processWaitingOnFloor_#t~ret70#1; 6374948#L1518-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 6374946#L1518-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6374941#L2994-20 assume 0 == isPersonOnFloor_~floor#1; 6374936#L2995-10 assume !(0 == isPersonOnFloor_~person#1); 6374931#L2999-10 assume !(1 == isPersonOnFloor_~person#1); 6374926#L3003-10 assume !(2 == isPersonOnFloor_~person#1); 6374921#L3007-10 assume !(3 == isPersonOnFloor_~person#1); 6374910#L3011-10 assume 4 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_4_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6373332#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret72#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret72#1;havoc processWaitingOnFloor_#t~ret72#1; 6373329#L1531-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 6373327#L1531-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6373326#L2994-22 assume 0 == isPersonOnFloor_~floor#1; 6373321#L2995-11 assume !(0 == isPersonOnFloor_~person#1); 6373316#L2999-11 assume !(1 == isPersonOnFloor_~person#1); 6373311#L3003-11 assume !(2 == isPersonOnFloor_~person#1); 6373306#L3007-11 assume !(3 == isPersonOnFloor_~person#1); 6373301#L3011-11 assume 4 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_4_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6373006#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret74#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret74#1;havoc processWaitingOnFloor_#t~ret74#1; 6373003#L1544-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 6373001#L1544-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 6372999#L2934-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 6373000#L2946-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 6389653#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 6389650#L659-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 6389645#L671-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 6368284#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 6368283#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 6368282#L2342-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 6368279#L2343-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 6368274#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 6368262#L2347-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 6368260#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6368258#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 6368254#L2607-2 assume !false; 6293897#L2608 [2023-11-28 23:58:00,848 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:00,848 INFO L85 PathProgramCache]: Analyzing trace with hash -166285633, now seen corresponding path program 2 times [2023-11-28 23:58:00,848 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:00,848 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1801662462] [2023-11-28 23:58:00,848 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:00,849 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:00,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:00,927 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:58:00,928 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:00,928 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1801662462] [2023-11-28 23:58:00,928 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1801662462] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:00,928 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:00,928 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-28 23:58:00,928 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1898831724] [2023-11-28 23:58:00,928 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:00,928 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:58:00,929 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:00,929 INFO L85 PathProgramCache]: Analyzing trace with hash 670924499, now seen corresponding path program 1 times [2023-11-28 23:58:00,929 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:00,929 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [637862912] [2023-11-28 23:58:00,929 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:00,929 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:00,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:00,970 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:58:00,970 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:00,970 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [637862912] [2023-11-28 23:58:00,970 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [637862912] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:00,970 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:00,970 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-28 23:58:00,970 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [743957386] [2023-11-28 23:58:00,970 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:00,971 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:58:00,971 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:00,971 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-28 23:58:00,971 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-28 23:58:00,971 INFO L87 Difference]: Start difference. First operand 181903 states and 309549 transitions. cyclomatic complexity: 127658 Second operand has 3 states, 3 states have (on average 30.666666666666668) internal successors, (92), 3 states have internal predecessors, (92), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:58:01,857 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:01,857 INFO L93 Difference]: Finished difference Result 182261 states and 309199 transitions. [2023-11-28 23:58:01,858 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 182261 states and 309199 transitions. [2023-11-28 23:58:02,988 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 99632 [2023-11-28 23:58:03,444 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 182261 states to 182261 states and 309199 transitions. [2023-11-28 23:58:03,444 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 115989 [2023-11-28 23:58:03,509 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 115989 [2023-11-28 23:58:03,509 INFO L73 IsDeterministic]: Start isDeterministic. Operand 182261 states and 309199 transitions. [2023-11-28 23:58:03,515 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:58:03,515 INFO L218 hiAutomatonCegarLoop]: Abstraction has 182261 states and 309199 transitions. [2023-11-28 23:58:03,607 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182261 states and 309199 transitions. [2023-11-28 23:58:05,002 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182261 to 181869. [2023-11-28 23:58:05,125 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 181869 states, 181869 states have (on average 1.6979639190846159) internal successors, (308807), 181868 states have internal predecessors, (308807), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:58:05,555 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 181869 states to 181869 states and 308807 transitions. [2023-11-28 23:58:05,555 INFO L240 hiAutomatonCegarLoop]: Abstraction has 181869 states and 308807 transitions. [2023-11-28 23:58:05,556 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-28 23:58:05,556 INFO L428 stractBuchiCegarLoop]: Abstraction has 181869 states and 308807 transitions. [2023-11-28 23:58:05,556 INFO L335 stractBuchiCegarLoop]: ======== Iteration 32 ============ [2023-11-28 23:58:05,556 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 181869 states and 308807 transitions. [2023-11-28 23:58:06,386 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 99392 [2023-11-28 23:58:06,386 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:58:06,386 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:58:06,390 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:06,390 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:06,390 INFO L748 eck$LassoCheckResult]: Stem: 6649130#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 6649131#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 6651729#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6650599#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 6650600#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 6651027#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 6653160#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6653170#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 6653670#L2208 assume !(0 == getOrigin_~person#1); 6652128#L2212 assume !(1 == getOrigin_~person#1); 6652129#L2216 assume !(2 == getOrigin_~person#1); 6653049#L2220 assume !(3 == getOrigin_~person#1); 6653712#L2224 assume !(4 == getOrigin_~person#1); 6648959#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 6648960#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6649154#L3174 assume !(0 == initPersonOnFloor_~floor#1); 6652463#L3201 assume 1 == initPersonOnFloor_~floor#1; 6650213#L3202 assume !(0 == initPersonOnFloor_~person#1); 6650214#L3205 assume !(1 == initPersonOnFloor_~person#1); 6651431#L3208 assume !(2 == initPersonOnFloor_~person#1); 6653155#L3211 assume !(3 == initPersonOnFloor_~person#1); 6652501#L3214 assume !(4 == initPersonOnFloor_~person#1); 6652386#L3217 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6650806#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6650807#L2304 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6652448#L2307 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 6649615#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6651178#L2966 assume !(0 == callOnFloor_~floorID#1); 6649373#L2969 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6649374#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 6650920#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 6650113#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 6649712#L2208-1 assume !(0 == getOrigin_~person#1); 6649713#L2212-1 assume !(1 == getOrigin_~person#1); 6651292#L2216-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 6650024#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6649552#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 6649553#L3201-1 assume !(1 == initPersonOnFloor_~floor#1); 6648758#L3228-1 assume 2 == initPersonOnFloor_~floor#1; 6648759#L3229-2 assume !(0 == initPersonOnFloor_~person#1); 6650562#L3232-2 assume !(1 == initPersonOnFloor_~person#1); 6648811#L3235-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6648812#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6651329#L2304-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6651034#L2307-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6651035#L2310-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6649883#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6651862#L2966-2 assume !(0 == callOnFloor_~floorID#1); 6651996#L2969-2 assume !(1 == callOnFloor_~floorID#1); 6653342#L2972-2 assume !(2 == callOnFloor_~floorID#1); 6652617#L2975-2 assume !(3 == callOnFloor_~floorID#1); 6652310#L2978-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 6652311#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 6654239#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 6654238#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6654237#L2899 assume !(0 == isFloorCalling_~floorID#1); 6654236#L2903 assume !(1 == isFloorCalling_~floorID#1); 6654235#L2907 assume !(2 == isFloorCalling_~floorID#1); 6654234#L2911 assume !(3 == isFloorCalling_~floorID#1); 6654233#L2915 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6654232#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 6654231#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 6654230#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 6652168#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 6652169#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 6649504#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 6649505#L1578 assume !(0 != timeShift_~tmp___9~2#1); 6651873#L1669 assume !(1 == ~doorState~0); 6657354#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6657353#L2899-3 assume !(0 == isFloorCalling_~floorID#1); 6657352#L2903-3 assume !(1 == isFloorCalling_~floorID#1); 6657351#L2907-3 assume !(2 == isFloorCalling_~floorID#1); 6657350#L2911-3 assume !(3 == isFloorCalling_~floorID#1); 6657349#L2915-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6657348#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 6657347#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 6654314#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 6654315#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 6654305#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 6654306#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 6654300#L1337 assume !(1 == ~currentHeading~0); 6654301#L1347 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6654290#L1347-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6654291#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 6659664#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 6659662#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 6659661#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 6659660#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 6657317#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 6657318#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 6659643#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6659642#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 6659635#L2607-2 assume !false; 6659636#L2608 [2023-11-28 23:58:06,391 INFO L750 eck$LassoCheckResult]: Loop: 6659636#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 6731763#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 6731761#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 6731760#L2615 assume 1 != cleanup_~tmp___0~12#1; 6731056#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6731023#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6731021#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 6730819#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 6730809#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 6730797#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 6730795#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6730793#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 6730791#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 6730789#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 6730787#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 6730785#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6730750#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 6730738#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 6730727#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 6730711#L1399-3 assume !(~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret55#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~15#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6730712#L2899-72 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6734420#isFloorCalling_returnLabel#73 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret55#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret55#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret55#1; 6734414#L1370-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~15#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~15#1; 6734415#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret55#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~15#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 6767375#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 6767376#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 6776414#L1578-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 6776411#L1580-2 assume !(0 != ~persons_0~0); 6776258#L1580-3 assume !(0 != ~persons_1~0); 6776252#L1594-1 assume !(0 != ~persons_2~0); 6776246#L1608-1 assume !(0 != ~persons_3~0); 6776227#L1622-1 assume !(0 != ~persons_4~0); 6773052#L1636-1 assume !(0 != ~persons_5~0); 6773051#L1650-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6773047#L2994-12 assume 0 == isPersonOnFloor_~floor#1; 6773036#L2995-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6769759#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 6769757#L1479-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 6769758#L1479-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6769916#L2994-14 assume 0 == isPersonOnFloor_~floor#1; 6769917#L2995-7 assume !(0 == isPersonOnFloor_~person#1); 6767736#L2999-7 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6736401#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret66#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret66#1;havoc processWaitingOnFloor_#t~ret66#1; 6736399#L1492-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 6736397#L1492-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6736395#L2994-16 assume 0 == isPersonOnFloor_~floor#1; 6736396#L2995-8 assume !(0 == isPersonOnFloor_~person#1); 6736582#L2999-8 assume !(1 == isPersonOnFloor_~person#1); 6736383#L3003-8 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6733922#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret68#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret68#1;havoc processWaitingOnFloor_#t~ret68#1; 6733918#L1505-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 6733914#L1505-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6733911#L2994-18 assume 0 == isPersonOnFloor_~floor#1; 6733909#L2995-9 assume !(0 == isPersonOnFloor_~person#1); 6733907#L2999-9 assume !(1 == isPersonOnFloor_~person#1); 6733905#L3003-9 assume !(2 == isPersonOnFloor_~person#1); 6733904#L3007-9 assume 3 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_3_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6733898#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret70#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret70#1;havoc processWaitingOnFloor_#t~ret70#1; 6733896#L1518-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 6733897#L1518-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6735681#L2994-20 assume 0 == isPersonOnFloor_~floor#1; 6735678#L2995-10 assume !(0 == isPersonOnFloor_~person#1); 6735671#L2999-10 assume !(1 == isPersonOnFloor_~person#1); 6735664#L3003-10 assume !(2 == isPersonOnFloor_~person#1); 6735657#L3007-10 assume !(3 == isPersonOnFloor_~person#1); 6735646#L3011-10 assume 4 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_4_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6732229#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret72#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret72#1;havoc processWaitingOnFloor_#t~ret72#1; 6732227#L1531-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 6732228#L1531-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 6731288#L2994-22 assume !(0 == isPersonOnFloor_~floor#1); 6731280#L3027-22 assume !(1 == isPersonOnFloor_~floor#1); 6731277#L3060-22 assume !(2 == isPersonOnFloor_~floor#1); 6731275#L3093-22 assume !(3 == isPersonOnFloor_~floor#1); 6731274#L3126-33 assume !(4 == isPersonOnFloor_~floor#1); 6731245#L3126-35 isPersonOnFloor_~retValue_acc~28#1 := 0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 6731242#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret74#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret74#1;havoc processWaitingOnFloor_#t~ret74#1; 6731240#L1544-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 6731238#L1544-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 6731236#L2934-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 6731237#L2946-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 6731876#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 6731863#L659-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 6731860#L671-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 6731858#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 6731857#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 6731856#L2342-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 6731854#L2343-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 6731855#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 6731831#L2347-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 6731819#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6731816#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 6731764#L2607-2 assume !false; 6659636#L2608 [2023-11-28 23:58:06,391 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:06,391 INFO L85 PathProgramCache]: Analyzing trace with hash -166285633, now seen corresponding path program 3 times [2023-11-28 23:58:06,391 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:06,391 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1466505714] [2023-11-28 23:58:06,391 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:06,391 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:06,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:06,470 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:58:06,470 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:06,471 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1466505714] [2023-11-28 23:58:06,471 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1466505714] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:06,471 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:06,471 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-28 23:58:06,471 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [178798739] [2023-11-28 23:58:06,471 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:06,471 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:58:06,472 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:06,472 INFO L85 PathProgramCache]: Analyzing trace with hash -69031944, now seen corresponding path program 1 times [2023-11-28 23:58:06,472 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:06,472 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [282000131] [2023-11-28 23:58:06,472 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:06,472 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:06,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:06,543 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:58:06,544 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:06,544 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [282000131] [2023-11-28 23:58:06,544 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [282000131] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:06,544 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:06,544 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-28 23:58:06,544 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1490528921] [2023-11-28 23:58:06,544 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:06,545 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:58:06,545 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:06,545 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-28 23:58:06,545 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-28 23:58:06,545 INFO L87 Difference]: Start difference. First operand 181869 states and 308807 transitions. cyclomatic complexity: 126950 Second operand has 6 states, 6 states have (on average 15.333333333333334) internal successors, (92), 6 states have internal predecessors, (92), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:58:09,806 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:09,806 INFO L93 Difference]: Finished difference Result 301505 states and 502104 transitions. [2023-11-28 23:58:09,807 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 301505 states and 502104 transitions. [2023-11-28 23:58:10,955 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 161596 [2023-11-28 23:58:12,189 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 301505 states to 294553 states and 489840 transitions. [2023-11-28 23:58:12,189 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 187653 [2023-11-28 23:58:12,316 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 187653 [2023-11-28 23:58:12,316 INFO L73 IsDeterministic]: Start isDeterministic. Operand 294553 states and 489840 transitions. [2023-11-28 23:58:12,318 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:58:12,318 INFO L218 hiAutomatonCegarLoop]: Abstraction has 294553 states and 489840 transitions. [2023-11-28 23:58:12,494 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294553 states and 489840 transitions. [2023-11-28 23:58:14,856 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294553 to 251813. [2023-11-28 23:58:14,990 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 251813 states, 251813 states have (on average 1.6967035061732316) internal successors, (427252), 251812 states have internal predecessors, (427252), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:58:15,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 251813 states to 251813 states and 427252 transitions. [2023-11-28 23:58:15,560 INFO L240 hiAutomatonCegarLoop]: Abstraction has 251813 states and 427252 transitions. [2023-11-28 23:58:15,561 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-28 23:58:15,561 INFO L428 stractBuchiCegarLoop]: Abstraction has 251813 states and 427252 transitions. [2023-11-28 23:58:15,561 INFO L335 stractBuchiCegarLoop]: ======== Iteration 33 ============ [2023-11-28 23:58:15,561 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 251813 states and 427252 transitions. [2023-11-28 23:58:16,570 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 140252 [2023-11-28 23:58:16,570 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:58:16,570 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:58:16,575 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:16,575 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:16,575 INFO L748 eck$LassoCheckResult]: Stem: 7132508#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 7132509#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 7135114#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7133984#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 7133985#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 7134407#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 7136586#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 7136595#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 7137112#L2208 assume !(0 == getOrigin_~person#1); 7135506#L2212 assume !(1 == getOrigin_~person#1); 7135507#L2216 assume !(2 == getOrigin_~person#1); 7136467#L2220 assume !(3 == getOrigin_~person#1); 7137163#L2224 assume !(4 == getOrigin_~person#1); 7132346#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 7132347#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7132542#L3174 assume !(0 == initPersonOnFloor_~floor#1); 7135846#L3201 assume 1 == initPersonOnFloor_~floor#1; 7133603#L3202 assume !(0 == initPersonOnFloor_~person#1); 7133604#L3205 assume !(1 == initPersonOnFloor_~person#1); 7134799#L3208 assume !(2 == initPersonOnFloor_~person#1); 7136581#L3211 assume !(3 == initPersonOnFloor_~person#1); 7135881#L3214 assume !(4 == initPersonOnFloor_~person#1); 7135776#L3217 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 7134182#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 7134183#L2304 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 7135831#L2307 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 7132999#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 7134551#L2966 assume !(0 == callOnFloor_~floorID#1); 7132760#L2969 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 7132761#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 7134294#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 7133493#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 7133093#L2208-1 assume !(0 == getOrigin_~person#1); 7133094#L2212-1 assume !(1 == getOrigin_~person#1); 7134670#L2216-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 7133411#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7132937#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 7132938#L3201-1 assume !(1 == initPersonOnFloor_~floor#1); 7132143#L3228-1 assume 2 == initPersonOnFloor_~floor#1; 7132144#L3229-2 assume !(0 == initPersonOnFloor_~person#1); 7133948#L3232-2 assume !(1 == initPersonOnFloor_~person#1); 7132200#L3235-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 7132201#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 7134710#L2304-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 7134416#L2307-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 7134417#L2310-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 7133258#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 7135248#L2966-2 assume !(0 == callOnFloor_~floorID#1); 7135376#L2969-2 assume !(1 == callOnFloor_~floorID#1); 7136784#L2972-2 assume !(2 == callOnFloor_~floorID#1); 7135997#L2975-2 assume !(3 == callOnFloor_~floorID#1); 7135700#L2978-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 7135701#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 7137725#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 7137724#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7137723#L2899 assume !(0 == isFloorCalling_~floorID#1); 7137722#L2903 assume !(1 == isFloorCalling_~floorID#1); 7137721#L2907 assume !(2 == isFloorCalling_~floorID#1); 7137720#L2911 assume !(3 == isFloorCalling_~floorID#1); 7137719#L2915 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7137718#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 7137717#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 7137715#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 7135553#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 7135554#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 7132890#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 7132891#L1578 assume !(0 != timeShift_~tmp___9~2#1); 7135254#L1669 assume !(1 == ~doorState~0); 7135256#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7135224#L2899-3 assume !(0 == isFloorCalling_~floorID#1); 7135225#L2903-3 assume !(1 == isFloorCalling_~floorID#1); 7137488#L2907-3 assume !(2 == isFloorCalling_~floorID#1); 7132216#L2911-3 assume !(3 == isFloorCalling_~floorID#1); 7132217#L2915-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7133427#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 7133428#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 7139777#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 7139776#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 7139775#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 7139773#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 7139774#L1337 assume !(1 == ~currentHeading~0); 7134812#L1347 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7134813#L1347-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 7139747#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 7139742#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 7139741#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 7139739#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 7139738#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 7139733#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 7139670#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 7139666#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7139664#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 7139662#L2607-2 assume !false; 7139663#L2608 [2023-11-28 23:58:16,576 INFO L750 eck$LassoCheckResult]: Loop: 7139663#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 7237680#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 7237679#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 7237678#L2615 assume 1 != cleanup_~tmp___0~12#1; 7237677#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7237675#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7237571#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 7237572#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 7231760#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 7231759#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 7231758#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7231757#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 7231756#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 7231755#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 7231754#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 7231751#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7231746#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 7231737#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 7231733#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 7231734#L1399-3 assume !(~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret55#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~15#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7231747#L2899-72 assume !(0 == isFloorCalling_~floorID#1); 7231740#L2903-72 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7231735#isFloorCalling_returnLabel#73 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret55#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret55#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret55#1; 7231729#L1370-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~15#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~15#1; 7231726#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret55#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret56#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~15#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 7231721#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 7231722#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 7238447#L1578-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 7238375#L1580-2 assume !(0 != ~persons_0~0); 7238352#L1580-3 assume !(0 != ~persons_1~0); 7238323#L1594-1 assume !(0 != ~persons_2~0); 7238293#L1608-1 assume !(0 != ~persons_3~0); 7238285#L1622-1 assume !(0 != ~persons_4~0); 7238277#L1636-1 assume !(0 != ~persons_5~0); 7238271#L1650-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~15#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 7238270#L2994-12 assume 0 == isPersonOnFloor_~floor#1; 7238261#L2995-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 7237949#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret64#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret64#1;havoc processWaitingOnFloor_#t~ret64#1; 7237946#L1479-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 7237944#L1479-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 7237939#L2994-14 assume 0 == isPersonOnFloor_~floor#1; 7237932#L2995-7 assume !(0 == isPersonOnFloor_~person#1); 7237916#L2999-7 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 7237832#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret66#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret66#1;havoc processWaitingOnFloor_#t~ret66#1; 7237829#L1492-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 7237826#L1492-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 7237824#L2994-16 assume 0 == isPersonOnFloor_~floor#1; 7237825#L2995-8 assume !(0 == isPersonOnFloor_~person#1); 7237843#L2999-8 assume !(1 == isPersonOnFloor_~person#1); 7237815#L3003-8 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 7237604#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret68#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret68#1;havoc processWaitingOnFloor_#t~ret68#1; 7237601#L1505-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 7237599#L1505-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 7237598#L2994-18 assume 0 == isPersonOnFloor_~floor#1; 7237596#L2995-9 assume !(0 == isPersonOnFloor_~person#1); 7237592#L2999-9 assume !(1 == isPersonOnFloor_~person#1); 7237585#L3003-9 assume !(2 == isPersonOnFloor_~person#1); 7237578#L3007-9 assume 3 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_3_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 7232087#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret70#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret70#1;havoc processWaitingOnFloor_#t~ret70#1; 7232084#L1518-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 7232082#L1518-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 7232077#L2994-20 assume !(0 == isPersonOnFloor_~floor#1); 7232078#L3027-20 assume !(1 == isPersonOnFloor_~floor#1); 7232079#L3060-20 assume !(2 == isPersonOnFloor_~floor#1); 7232080#L3093-20 assume !(3 == isPersonOnFloor_~floor#1); 7232081#L3126-30 assume !(4 == isPersonOnFloor_~floor#1); 7232049#L3126-32 isPersonOnFloor_~retValue_acc~28#1 := 0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 7231971#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret72#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret72#1;havoc processWaitingOnFloor_#t~ret72#1; 7231968#L1531-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 7231966#L1531-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 7231965#L2994-22 assume !(0 == isPersonOnFloor_~floor#1); 7231958#L3027-22 assume !(1 == isPersonOnFloor_~floor#1); 7231951#L3060-22 assume !(2 == isPersonOnFloor_~floor#1); 7231944#L3093-22 assume !(3 == isPersonOnFloor_~floor#1); 7231937#L3126-33 assume !(4 == isPersonOnFloor_~floor#1); 7231931#L3126-35 isPersonOnFloor_~retValue_acc~28#1 := 0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 7231856#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret74#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret74#1;havoc processWaitingOnFloor_#t~ret74#1; 7231853#L1544-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 7231851#L1544-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 7231849#L2934-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 7231850#L2946-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 7237715#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret64#1, processWaitingOnFloor_#t~ret65#1, processWaitingOnFloor_#t~ret66#1, processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~15#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 7237712#L659-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 7237707#L671-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 7237705#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 7237704#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 7237703#L2342-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 7237700#L2343-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 7237695#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 7237684#L2347-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 7237683#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7237682#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 7237681#L2607-2 assume !false; 7139663#L2608 [2023-11-28 23:58:16,577 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:16,577 INFO L85 PathProgramCache]: Analyzing trace with hash -166285633, now seen corresponding path program 4 times [2023-11-28 23:58:16,577 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:16,577 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [437849395] [2023-11-28 23:58:16,577 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:16,578 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:16,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,680 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:58:16,681 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:16,681 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [437849395] [2023-11-28 23:58:16,681 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [437849395] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:16,681 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:16,681 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-28 23:58:16,681 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1140018278] [2023-11-28 23:58:16,681 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:16,681 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:58:16,682 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:16,682 INFO L85 PathProgramCache]: Analyzing trace with hash -2047115374, now seen corresponding path program 1 times [2023-11-28 23:58:16,682 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:16,682 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1990279764] [2023-11-28 23:58:16,682 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:16,682 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:16,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:16,748 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:58:16,748 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:16,748 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1990279764] [2023-11-28 23:58:16,748 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1990279764] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:16,748 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:16,748 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-28 23:58:16,748 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1256797396] [2023-11-28 23:58:16,749 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:16,749 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:58:16,749 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:16,749 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-28 23:58:16,749 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-28 23:58:16,749 INFO L87 Difference]: Start difference. First operand 251813 states and 427252 transitions. cyclomatic complexity: 175455 Second operand has 6 states, 6 states have (on average 15.5) internal successors, (93), 6 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:58:21,505 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:21,505 INFO L93 Difference]: Finished difference Result 669301 states and 1126800 transitions. [2023-11-28 23:58:21,505 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 669301 states and 1126800 transitions. [2023-11-28 23:58:24,625 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 361678 [2023-11-28 23:58:26,598 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 669301 states to 655509 states and 1102480 transitions. [2023-11-28 23:58:26,598 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 415759 [2023-11-28 23:58:26,836 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 415759 [2023-11-28 23:58:26,836 INFO L73 IsDeterministic]: Start isDeterministic. Operand 655509 states and 1102480 transitions. [2023-11-28 23:58:26,837 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:58:26,837 INFO L218 hiAutomatonCegarLoop]: Abstraction has 655509 states and 1102480 transitions. [2023-11-28 23:58:27,235 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 655509 states and 1102480 transitions. [2023-11-28 23:58:30,726 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 655509 to 275245. [2023-11-28 23:58:30,917 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 275245 states, 275245 states have (on average 1.6976075859688642) internal successors, (467258), 275244 states have internal predecessors, (467258), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:58:32,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 275245 states to 275245 states and 467258 transitions. [2023-11-28 23:58:32,415 INFO L240 hiAutomatonCegarLoop]: Abstraction has 275245 states and 467258 transitions. [2023-11-28 23:58:32,416 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-11-28 23:58:32,416 INFO L428 stractBuchiCegarLoop]: Abstraction has 275245 states and 467258 transitions. [2023-11-28 23:58:32,416 INFO L335 stractBuchiCegarLoop]: ======== Iteration 34 ============ [2023-11-28 23:58:32,416 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 275245 states and 467258 transitions. [2023-11-28 23:58:33,036 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 155872 [2023-11-28 23:58:33,036 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:58:33,036 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:58:33,042 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:33,042 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:33,043 INFO L748 eck$LassoCheckResult]: Stem: 8053648#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 8053649#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 8056213#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 8055104#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 8055105#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 8055521#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 8057643#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 8057649#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 8058161#L2208 assume !(0 == getOrigin_~person#1); 8056616#L2212 assume !(1 == getOrigin_~person#1); 8056617#L2216 assume !(2 == getOrigin_~person#1); 8057531#L2220 assume !(3 == getOrigin_~person#1); 8058202#L2224 assume !(4 == getOrigin_~person#1); 8053490#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 8053491#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 8053682#L3174 assume !(0 == initPersonOnFloor_~floor#1); 8056944#L3201 assume 1 == initPersonOnFloor_~floor#1; 8054717#L3202 assume !(0 == initPersonOnFloor_~person#1); 8054718#L3205 assume !(1 == initPersonOnFloor_~person#1); 8055909#L3208 assume !(2 == initPersonOnFloor_~person#1); 8057636#L3211 assume !(3 == initPersonOnFloor_~person#1); 8056980#L3214 assume !(4 == initPersonOnFloor_~person#1); 8056871#L3217 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 8055297#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 8055298#L2304 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 8056929#L2307 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 8054134#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 8055662#L2966 assume !(0 == callOnFloor_~floorID#1); 8053896#L2969 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 8053897#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 8055409#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 8054612#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 8054227#L2208-1 assume !(0 == getOrigin_~person#1); 8054228#L2212-1 assume !(1 == getOrigin_~person#1); 8055782#L2216-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 8054535#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 8054075#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 8054076#L3201-1 assume !(1 == initPersonOnFloor_~floor#1); 8053287#L3228-1 assume 2 == initPersonOnFloor_~floor#1; 8053288#L3229-2 assume !(0 == initPersonOnFloor_~person#1); 8055068#L3232-2 assume !(1 == initPersonOnFloor_~person#1); 8053344#L3235-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 8053345#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 8055818#L2304-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 8055528#L2307-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 8055529#L2310-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 8054388#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 8056354#L2966-2 assume !(0 == callOnFloor_~floorID#1); 8056486#L2969-2 assume !(1 == callOnFloor_~floorID#1); 8057829#L2972-2 assume !(2 == callOnFloor_~floorID#1); 8057092#L2975-2 assume !(3 == callOnFloor_~floorID#1); 8056796#L2978-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 8056797#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 8058704#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 8058703#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8058702#L2899 assume !(0 == isFloorCalling_~floorID#1); 8058701#L2903 assume !(1 == isFloorCalling_~floorID#1); 8058700#L2907 assume !(2 == isFloorCalling_~floorID#1); 8058699#L2911 assume !(3 == isFloorCalling_~floorID#1); 8058698#L2915 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8058697#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 8058696#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 8058694#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8056656#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 8056657#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 8054024#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 8054025#L1578 assume !(0 != timeShift_~tmp___9~2#1); 8056365#L1669 assume !(1 == ~doorState~0); 8059732#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8059731#L2899-3 assume !(0 == isFloorCalling_~floorID#1); 8059730#L2903-3 assume !(1 == isFloorCalling_~floorID#1); 8059729#L2907-3 assume !(2 == isFloorCalling_~floorID#1); 8059728#L2911-3 assume !(3 == isFloorCalling_~floorID#1); 8059727#L2915-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8059726#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 8059725#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 8058766#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8058767#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 8059689#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 8059688#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 8059687#L1337 assume !(1 == ~currentHeading~0); 8055922#L1347 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 8055923#L1347-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8059680#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 8059679#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8059678#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 8059677#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 8059674#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 8059670#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 8059660#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 8059657#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 8059656#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 8059654#L2607-2 assume !false; 8059655#L2608 [2023-11-28 23:58:33,043 INFO L750 eck$LassoCheckResult]: Loop: 8059655#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 8163691#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 8163689#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 8163685#L2615 assume 1 != cleanup_~tmp___0~12#1; 8163686#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8165219#L2899-65 assume !(0 == isFloorCalling_~floorID#1); 8165220#L2903-65 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8163741#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 8163742#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 8165872#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 8165871#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 8165870#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8165869#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 8165868#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 8165867#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 8165866#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 8165865#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8165864#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 8165863#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 8165861#L1425-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8165860#getCurrentFloorID_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 8165858#L1429-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 8165857#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 8165855#L1578-2 assume !(0 != timeShift_~tmp___9~2#1); 8165813#L1669-3 assume !(1 == ~doorState~0); 8165814#L1669-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8201469#L2899-73 assume !(0 == isFloorCalling_~floorID#1); 8201468#L2903-73 assume !(1 == isFloorCalling_~floorID#1); 8201467#L2907-73 assume !(2 == isFloorCalling_~floorID#1); 8201466#L2911-73 assume !(3 == isFloorCalling_~floorID#1); 8201465#L2915-73 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8201464#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 8200218#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 8200219#L1280-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8200188#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 8200189#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 8200184#L1677-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 8197266#L1337-3 assume !(1 == ~currentHeading~0); 8197267#L1347-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 8163730#L1347-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8159241#L1353-7 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 8302827#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8302819#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 8302816#L2342-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 8302809#$Ultimate##7403 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 8302806#$Ultimate##7412 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 8302798#$Ultimate##7421 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 8302795#$Ultimate##7430 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 8302794#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 8302784#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 8302781#L2607-2 assume !false; 8302777#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 8302775#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 8302771#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 8302770#L2615 assume 1 != cleanup_~tmp___0~12#1; 8302681#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8302679#L2899-65 assume !(0 == isFloorCalling_~floorID#1); 8302680#L2903-65 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8303858#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 8303850#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 8303841#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 8303537#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 8303535#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8303533#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 8303531#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 8303529#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 8303527#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 8303525#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8303523#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 8303521#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 8303518#L1425-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8303516#getCurrentFloorID_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 8303513#L1429-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 8301246#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 8169129#L1578-2 assume !(0 != timeShift_~tmp___9~2#1); 8169125#L1669-3 assume !(1 == ~doorState~0); 8162226#L1669-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8162224#L2899-73 assume !(0 == isFloorCalling_~floorID#1); 8162220#L2903-73 assume !(1 == isFloorCalling_~floorID#1); 8162219#L2907-73 assume !(2 == isFloorCalling_~floorID#1); 8162218#L2911-73 assume !(3 == isFloorCalling_~floorID#1); 8162217#L2915-73 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8162216#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 8162214#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 8162190#L1280-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8162187#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 8162186#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 8162184#L1677-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~18#1; 8162182#L1451-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~18#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~18#1; 8162180#getReverseHeading_returnLabel#3 timeShift_#t~ret84#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret84#1;havoc timeShift_#t~ret84#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8162178#L2899-104 assume !(0 == isFloorCalling_~floorID#1); 8162175#L2903-104 assume !(1 == isFloorCalling_~floorID#1); 8162172#L2907-104 assume !(2 == isFloorCalling_~floorID#1); 8162170#L2911-104 assume !(3 == isFloorCalling_~floorID#1); 8162169#L2915-104 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8162167#isFloorCalling_returnLabel#105 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 8162166#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 8162164#L1280-3 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8162165#getCurrentFloorID_returnLabel#11 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 8319526#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret85#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret85#1;havoc timeShift_#t~ret85#1; 8319525#L1686-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~18#1; 8319524#L1451-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~18#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~18#1; 8319523#getReverseHeading_returnLabel#4 timeShift_#t~ret86#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 8313001#L1337-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 8197287#isTopFloor_returnLabel#17 continueInDirection_#t~ret54#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret54#1;havoc continueInDirection_#t~ret54#1; 8197262#L1341-12 assume !(0 != continueInDirection_~tmp~11#1); 8163731#L1347-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8163729#L1353-9 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 8163727#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8163726#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 8163725#L2342-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 8163723#L2343-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 8163724#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 8163699#L2347-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 8163696#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 8163693#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 8163692#L2607-2 assume !false; 8059655#L2608 [2023-11-28 23:58:33,044 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:33,044 INFO L85 PathProgramCache]: Analyzing trace with hash -166285633, now seen corresponding path program 5 times [2023-11-28 23:58:33,044 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:33,044 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1121065787] [2023-11-28 23:58:33,044 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:33,044 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:33,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:33,122 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:58:33,122 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:33,122 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1121065787] [2023-11-28 23:58:33,122 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1121065787] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:33,122 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:33,123 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-28 23:58:33,123 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [356845605] [2023-11-28 23:58:33,123 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:33,123 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:58:33,123 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:33,123 INFO L85 PathProgramCache]: Analyzing trace with hash 1105785319, now seen corresponding path program 1 times [2023-11-28 23:58:33,123 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:33,124 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1578274092] [2023-11-28 23:58:33,124 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:33,124 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:33,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:33,171 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2023-11-28 23:58:33,171 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:33,171 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1578274092] [2023-11-28 23:58:33,171 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1578274092] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:33,171 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:33,171 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-28 23:58:33,171 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [163922117] [2023-11-28 23:58:33,172 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:33,172 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:58:33,172 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:33,172 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-28 23:58:33,172 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-28 23:58:33,172 INFO L87 Difference]: Start difference. First operand 275245 states and 467258 transitions. cyclomatic complexity: 192031 Second operand has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:58:34,473 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:34,473 INFO L93 Difference]: Finished difference Result 275242 states and 467249 transitions. [2023-11-28 23:58:34,473 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 275242 states and 467249 transitions. [2023-11-28 23:58:35,393 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 155872 [2023-11-28 23:58:36,508 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 275242 states to 275242 states and 467249 transitions. [2023-11-28 23:58:36,509 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 174288 [2023-11-28 23:58:36,604 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 174288 [2023-11-28 23:58:36,604 INFO L73 IsDeterministic]: Start isDeterministic. Operand 275242 states and 467249 transitions. [2023-11-28 23:58:36,654 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:58:36,654 INFO L218 hiAutomatonCegarLoop]: Abstraction has 275242 states and 467249 transitions. [2023-11-28 23:58:36,793 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 275242 states and 467249 transitions. [2023-11-28 23:58:39,168 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 275242 to 275241. [2023-11-28 23:58:39,333 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 275241 states, 275241 states have (on average 1.6975959250257047) internal successors, (467248), 275240 states have internal predecessors, (467248), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:58:39,981 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 275241 states to 275241 states and 467248 transitions. [2023-11-28 23:58:39,981 INFO L240 hiAutomatonCegarLoop]: Abstraction has 275241 states and 467248 transitions. [2023-11-28 23:58:39,981 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-28 23:58:39,982 INFO L428 stractBuchiCegarLoop]: Abstraction has 275241 states and 467248 transitions. [2023-11-28 23:58:39,982 INFO L335 stractBuchiCegarLoop]: ======== Iteration 35 ============ [2023-11-28 23:58:39,982 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 275241 states and 467248 transitions. [2023-11-28 23:58:41,145 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 155872 [2023-11-28 23:58:41,145 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:58:41,146 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:58:41,150 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:41,150 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:41,151 INFO L748 eck$LassoCheckResult]: Stem: 8604157#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 8604158#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 8606673#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 8605585#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 8605586#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 8606002#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 8608023#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 8608031#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 8608493#L2208 assume !(0 == getOrigin_~person#1); 8607051#L2212 assume !(1 == getOrigin_~person#1); 8607052#L2216 assume !(2 == getOrigin_~person#1); 8607922#L2220 assume !(3 == getOrigin_~person#1); 8608531#L2224 assume !(4 == getOrigin_~person#1); 8603991#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 8603992#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 8604181#L3174 assume !(0 == initPersonOnFloor_~floor#1); 8607360#L3201 assume 1 == initPersonOnFloor_~floor#1; 8605216#L3202 assume !(0 == initPersonOnFloor_~person#1); 8605217#L3205 assume !(1 == initPersonOnFloor_~person#1); 8606387#L3208 assume !(2 == initPersonOnFloor_~person#1); 8608018#L3211 assume !(3 == initPersonOnFloor_~person#1); 8607397#L3214 assume !(4 == initPersonOnFloor_~person#1); 8607293#L3217 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 8605784#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 8605785#L2304 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 8607345#L2307 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 8604632#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 8606146#L2966 assume !(0 == callOnFloor_~floorID#1); 8604396#L2969 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 8604397#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 8605893#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 8605116#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 8604725#L2208-1 assume !(0 == getOrigin_~person#1); 8604726#L2212-1 assume !(1 == getOrigin_~person#1); 8606257#L2216-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 8605034#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 8604568#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 8604569#L3201-1 assume !(1 == initPersonOnFloor_~floor#1); 8603789#L3228-1 assume 2 == initPersonOnFloor_~floor#1; 8603790#L3229-2 assume !(0 == initPersonOnFloor_~person#1); 8605549#L3232-2 assume !(1 == initPersonOnFloor_~person#1); 8603842#L3235-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 8603843#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 8606293#L2304-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 8606009#L2307-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 8606010#L2310-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 8604893#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 8606801#L2966-2 assume !(0 == callOnFloor_~floorID#1); 8606920#L2969-2 assume !(1 == callOnFloor_~floorID#1); 8608199#L2972-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 8608205#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 8606917#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 8606112#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8606113#L2899 assume !(0 == isFloorCalling_~floorID#1); 8608551#L2903 assume !(1 == isFloorCalling_~floorID#1); 8606774#L2907 assume !(2 == isFloorCalling_~floorID#1); 8606775#L2911 assume !(3 == isFloorCalling_~floorID#1); 8607623#L2915 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8603800#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 8603801#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 8605055#L1425 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 8605056#L1399-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8608747#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 8603951#L705-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 8603952#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 8609975#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 8609974#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 8609973#L1578 assume !(0 != timeShift_~tmp___9~2#1); 8609972#L1669 assume !(1 == ~doorState~0); 8607937#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8606778#L2899-3 assume !(0 == isFloorCalling_~floorID#1); 8606779#L2903-3 assume !(1 == isFloorCalling_~floorID#1); 8608796#L2907-3 assume !(2 == isFloorCalling_~floorID#1); 8603868#L2911-3 assume !(3 == isFloorCalling_~floorID#1); 8603869#L2915-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8605048#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 8605049#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 8606843#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8608818#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 8608459#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 8608822#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 8608824#L1337 assume !(1 == ~currentHeading~0); 8609025#L1347 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 8609016#L1347-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8609017#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 8671697#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8671696#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 8671693#L2342 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 8671691#L2343 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 8671692#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 8671674#L2347 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 8671671#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 8671670#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 8671668#L2607-2 assume !false; 8671669#L2608 [2023-11-28 23:58:41,151 INFO L750 eck$LassoCheckResult]: Loop: 8671669#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 8816046#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 8816045#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 8816044#L2615 assume 1 != cleanup_~tmp___0~12#1; 8816043#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8816041#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8814191#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 8814192#L796 assume !(0 != anyStopRequested_~tmp___3~0#1); 8819390#L800 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 8819374#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 8819373#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 8819371#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8819363#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 8819360#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 8819354#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 8819352#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 8819351#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8819350#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 8819342#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 8819339#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 8819337#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8819336#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 8819296#L705-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 8818494#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 8816027#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 8814187#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 8811095#L1578-2 assume !(0 != timeShift_~tmp___9~2#1); 8811096#L1669-3 assume !(1 == ~doorState~0); 8823201#L1669-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8843985#L2899-73 assume !(0 == isFloorCalling_~floorID#1); 8843965#L2903-73 assume !(1 == isFloorCalling_~floorID#1); 8843964#L2907-73 assume !(2 == isFloorCalling_~floorID#1); 8843963#L2911-73 assume !(3 == isFloorCalling_~floorID#1); 8843962#L2915-73 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8843961#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 8843960#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 8843959#L1280-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8830637#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 8830635#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 8830631#L1677-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 8830629#L1337-3 assume !(1 == ~currentHeading~0); 8830626#L1347-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 8830622#L1347-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8709479#L1353-7 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 8830620#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8830619#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 8830616#L2342-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 8830614#$Ultimate##7403 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 8830613#$Ultimate##7412 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 8830612#$Ultimate##7421 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 8830611#$Ultimate##7430 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 8830609#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 8830607#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 8830605#L2607-2 assume !false; 8830603#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 8830601#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 8830600#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 8830599#L2615 assume 1 != cleanup_~tmp___0~12#1; 8830598#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8830595#L2899-65 assume !(0 == isFloorCalling_~floorID#1); 8830596#L2903-65 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8830615#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 8830582#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 8830573#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 8830572#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 8830571#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8830570#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 8830568#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 8830567#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 8830566#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 8830303#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8830299#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 8830295#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 8830279#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 8830280#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8830337#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 8832947#L705-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 8832946#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 8832945#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 8832939#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 8832937#L1578-2 assume !(0 != timeShift_~tmp___9~2#1); 8818327#L1669-3 assume !(1 == ~doorState~0); 8818328#L1669-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8818804#L2899-73 assume !(0 == isFloorCalling_~floorID#1); 8818803#L2903-73 assume !(1 == isFloorCalling_~floorID#1); 8818798#L2907-73 assume !(2 == isFloorCalling_~floorID#1); 8818796#L2911-73 assume !(3 == isFloorCalling_~floorID#1); 8818793#L2915-73 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8818791#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 8818789#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 8818786#L1280-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8818781#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 8818780#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 8818779#L1677-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~18#1; 8818774#L1451-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~18#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~18#1; 8818772#getReverseHeading_returnLabel#3 timeShift_#t~ret84#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret84#1;havoc timeShift_#t~ret84#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 8818771#L2899-104 assume !(0 == isFloorCalling_~floorID#1); 8818447#L2903-104 assume !(1 == isFloorCalling_~floorID#1); 8818443#L2907-104 assume !(2 == isFloorCalling_~floorID#1); 8818442#L2911-104 assume !(3 == isFloorCalling_~floorID#1); 8818439#L2915-104 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 8818437#isFloorCalling_returnLabel#105 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 8818433#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 8818431#L1280-3 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8818371#getCurrentFloorID_returnLabel#11 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 8818369#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret85#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret85#1;havoc timeShift_#t~ret85#1; 8818368#L1686-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~18#1; 8818363#L1451-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~18#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~18#1; 8818364#getReverseHeading_returnLabel#4 timeShift_#t~ret86#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 8816078#L1337-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 8816077#isTopFloor_returnLabel#17 continueInDirection_#t~ret54#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret54#1;havoc continueInDirection_#t~ret54#1; 8816075#L1341-12 assume !(0 != continueInDirection_~tmp~11#1); 8816073#L1347-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8816072#L1353-9 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 8816071#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 8816070#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 8816069#L2342-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 8816066#L2343-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 8816061#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret121#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret121#1;havoc __utac_acc__Specification1_spec__3_#t~ret121#1; 8816050#L2347-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 8816049#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 8816048#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 8816047#L2607-2 assume !false; 8671669#L2608 [2023-11-28 23:58:41,151 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:41,152 INFO L85 PathProgramCache]: Analyzing trace with hash 1170911634, now seen corresponding path program 1 times [2023-11-28 23:58:41,152 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:41,152 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1603900988] [2023-11-28 23:58:41,152 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:41,152 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:41,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:41,191 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:58:41,191 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:41,191 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1603900988] [2023-11-28 23:58:41,192 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1603900988] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:41,192 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:41,192 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-28 23:58:41,192 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [321308850] [2023-11-28 23:58:41,192 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:41,192 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:58:41,192 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:41,193 INFO L85 PathProgramCache]: Analyzing trace with hash 2055198160, now seen corresponding path program 1 times [2023-11-28 23:58:41,193 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:41,193 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [582282946] [2023-11-28 23:58:41,193 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:41,193 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:41,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:41,300 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-28 23:58:41,301 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:41,301 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [582282946] [2023-11-28 23:58:41,301 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [582282946] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:41,301 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:41,301 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-28 23:58:41,301 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1741507915] [2023-11-28 23:58:41,301 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:41,301 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:58:41,302 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:41,302 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-28 23:58:41,302 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-28 23:58:41,302 INFO L87 Difference]: Start difference. First operand 275241 states and 467248 transitions. cyclomatic complexity: 192025 Second operand has 3 states, 3 states have (on average 31.333333333333332) internal successors, (94), 2 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:58:42,038 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:42,038 INFO L93 Difference]: Finished difference Result 224063 states and 383966 transitions. [2023-11-28 23:58:42,038 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 224063 states and 383966 transitions. [2023-11-28 23:58:43,445 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 131200 [2023-11-28 23:58:44,000 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 224063 states to 224063 states and 383966 transitions. [2023-11-28 23:58:44,000 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 141477 [2023-11-28 23:58:44,066 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 141477 [2023-11-28 23:58:44,067 INFO L73 IsDeterministic]: Start isDeterministic. Operand 224063 states and 383966 transitions. [2023-11-28 23:58:44,067 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:58:44,067 INFO L218 hiAutomatonCegarLoop]: Abstraction has 224063 states and 383966 transitions. [2023-11-28 23:58:44,168 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 224063 states and 383966 transitions. [2023-11-28 23:58:46,219 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 224063 to 224063. [2023-11-28 23:58:46,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 224063 states, 224063 states have (on average 1.7136519639565657) internal successors, (383966), 224062 states have internal predecessors, (383966), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:58:46,908 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 224063 states to 224063 states and 383966 transitions. [2023-11-28 23:58:46,908 INFO L240 hiAutomatonCegarLoop]: Abstraction has 224063 states and 383966 transitions. [2023-11-28 23:58:46,908 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-28 23:58:46,909 INFO L428 stractBuchiCegarLoop]: Abstraction has 224063 states and 383966 transitions. [2023-11-28 23:58:46,909 INFO L335 stractBuchiCegarLoop]: ======== Iteration 36 ============ [2023-11-28 23:58:46,909 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 224063 states and 383966 transitions. [2023-11-28 23:58:47,899 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 131200 [2023-11-28 23:58:47,913 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:58:47,913 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:58:47,921 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:47,937 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:47,938 INFO L748 eck$LassoCheckResult]: Stem: 9103468#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 9103469#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 9106006#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 9104910#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 9104911#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 9105327#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 9107453#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 9107465#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 9107971#L2208 assume !(0 == getOrigin_~person#1); 9106396#L2212 assume !(1 == getOrigin_~person#1); 9106397#L2216 assume !(2 == getOrigin_~person#1); 9107336#L2220 assume !(3 == getOrigin_~person#1); 9108008#L2224 assume !(4 == getOrigin_~person#1); 9103306#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 9103307#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 9103492#L3174 assume !(0 == initPersonOnFloor_~floor#1); 9106723#L3201 assume 1 == initPersonOnFloor_~floor#1; 9104531#L3202 assume !(0 == initPersonOnFloor_~person#1); 9104532#L3205 assume !(1 == initPersonOnFloor_~person#1); 9105721#L3208 assume !(2 == initPersonOnFloor_~person#1); 9107447#L3211 assume !(3 == initPersonOnFloor_~person#1); 9106764#L3214 assume !(4 == initPersonOnFloor_~person#1); 9106651#L3217 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 9105107#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 9105108#L2304 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 9106708#L2307 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 9103945#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 9105475#L2966 assume !(0 == callOnFloor_~floorID#1); 9103706#L2969 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 9103707#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 9105221#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 9104428#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 9104035#L2208-1 assume !(0 == getOrigin_~person#1); 9104036#L2212-1 assume !(1 == getOrigin_~person#1); 9105590#L2216-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 9104340#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 9103881#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 9103882#L3201-1 assume !(1 == initPersonOnFloor_~floor#1); 9103104#L3228-1 assume 2 == initPersonOnFloor_~floor#1; 9103105#L3229-2 assume !(0 == initPersonOnFloor_~person#1); 9104873#L3232-2 assume !(1 == initPersonOnFloor_~person#1); 9103157#L3235-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 9103158#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 9105625#L2304-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 9105334#L2307-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 9105335#L2310-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 9104200#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 9106138#L2966-2 assume !(0 == callOnFloor_~floorID#1); 9106261#L2969-2 assume !(1 == callOnFloor_~floorID#1); 9107641#L2972-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 9107649#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 9106256#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 9105440#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9105441#L2899 assume !(0 == isFloorCalling_~floorID#1); 9108032#L2903 assume !(1 == isFloorCalling_~floorID#1); 9106109#L2907 assume !(2 == isFloorCalling_~floorID#1); 9106110#L2911 assume !(3 == isFloorCalling_~floorID#1); 9106994#L2915 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9103115#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 9103116#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 9104364#L1425 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 9104365#L1399-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9108238#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 9103267#L705-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 9103268#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 9106892#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 9107029#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 9108534#L1578 assume !(0 != timeShift_~tmp___9~2#1); 9106144#L1669 assume 1 == ~doorState~0;~doorState~0 := 0; 9106145#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9106113#L2899-3 assume !(0 == isFloorCalling_~floorID#1); 9106114#L2903-3 assume !(1 == isFloorCalling_~floorID#1); 9108405#L2907-3 assume !(2 == isFloorCalling_~floorID#1); 9103183#L2911-3 assume !(3 == isFloorCalling_~floorID#1); 9103184#L2915-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9104357#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 9104358#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 9105692#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9105693#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 9107632#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 9107633#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 9108004#L1337 assume !(1 == ~currentHeading~0); 9108005#L1347 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 9108535#L1347-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 9108206#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 9107555#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9106362#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 9106363#L2342 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 9159983#$Ultimate##3791 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 9159966#$Ultimate##3800 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 9159970#$Ultimate##3809 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 9159963#$Ultimate##3818 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 9159951#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 9159948#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 9159943#L2607-2 assume !false; 9159944#L2608 [2023-11-28 23:58:47,939 INFO L750 eck$LassoCheckResult]: Loop: 9159944#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 9279500#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 9279499#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 9279498#L2615 assume 1 != cleanup_~tmp___0~12#1; 9279497#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9279495#L2899-65 assume !(0 == isFloorCalling_~floorID#1); 9279496#L2903-65 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9280168#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 9279481#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 9279472#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 9279471#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 9279470#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9279469#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 9279468#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 9279467#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 9279466#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 9279465#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9279464#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 9279463#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 9279462#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 9279460#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9279459#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 9279457#L705-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 9279456#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 9279455#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 9279454#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 9279452#L1578-2 assume !(0 != timeShift_~tmp___9~2#1); 9279447#L1669-3 assume !(1 == ~doorState~0); 9279445#L1669-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9279444#L2899-73 assume !(0 == isFloorCalling_~floorID#1); 9279443#L2903-73 assume !(1 == isFloorCalling_~floorID#1); 9279442#L2907-73 assume !(2 == isFloorCalling_~floorID#1); 9279441#L2911-73 assume !(3 == isFloorCalling_~floorID#1); 9279440#L2915-73 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9279439#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 9279438#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 9279437#L1280-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9201705#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 9201704#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 9199586#L1677-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 9199587#L1337-3 assume !(1 == ~currentHeading~0); 9202757#L1347-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 9202758#L1347-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9189584#L1353-7 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 9278797#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9278796#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 9278795#L2342-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 9278794#$Ultimate##7403 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 9278793#$Ultimate##7412 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 9278792#$Ultimate##7421 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 9278791#$Ultimate##7430 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 9278790#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 9278789#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 9278788#L2607-2 assume !false; 9278787#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 9278781#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 9278780#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 9278779#L2615 assume 1 != cleanup_~tmp___0~12#1; 9278777#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9278775#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9278773#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 9278758#L796 assume !(0 != anyStopRequested_~tmp___3~0#1); 9278749#L800 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 9278739#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 9278738#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 9278737#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9278736#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 9278735#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 9278734#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 9278733#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 9278732#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9278731#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 9278730#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 9278729#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 9278721#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9278720#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 9278717#L705-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 9278718#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 9319212#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 9319206#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 9319204#L1578-2 assume !(0 != timeShift_~tmp___9~2#1); 9280153#L1669-3 assume !(1 == ~doorState~0); 9280151#L1669-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9280150#L2899-73 assume !(0 == isFloorCalling_~floorID#1); 9280149#L2903-73 assume !(1 == isFloorCalling_~floorID#1); 9280148#L2907-73 assume !(2 == isFloorCalling_~floorID#1); 9280147#L2911-73 assume !(3 == isFloorCalling_~floorID#1); 9280146#L2915-73 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9280145#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 9280144#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 9280142#L1280-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9280121#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 9280120#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 9280119#L1677-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~18#1; 9280118#L1451-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~18#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~18#1; 9280117#getReverseHeading_returnLabel#3 timeShift_#t~ret84#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret84#1;havoc timeShift_#t~ret84#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9280116#L2899-104 assume !(0 == isFloorCalling_~floorID#1); 9280115#L2903-104 assume !(1 == isFloorCalling_~floorID#1); 9280114#L2907-104 assume !(2 == isFloorCalling_~floorID#1); 9280113#L2911-104 assume !(3 == isFloorCalling_~floorID#1); 9280112#L2915-104 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9280111#isFloorCalling_returnLabel#105 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 9280110#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 9280109#L1280-3 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9279538#getCurrentFloorID_returnLabel#11 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 9279536#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret85#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret85#1;havoc timeShift_#t~ret85#1; 9279534#L1686-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~18#1; 9279533#L1451-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~18#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~18#1; 9279532#getReverseHeading_returnLabel#4 timeShift_#t~ret86#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 9279531#L1337-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 9279529#isTopFloor_returnLabel#17 continueInDirection_#t~ret54#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret54#1;havoc continueInDirection_#t~ret54#1; 9279528#L1341-12 assume !(0 != continueInDirection_~tmp~11#1); 9279527#L1347-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 9279526#L1353-9 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 9279525#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9279524#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 9279523#L2342-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 9279519#$Ultimate##7403 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 9279517#L2358-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 9279518#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret122#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret122#1;havoc __utac_acc__Specification1_spec__3_#t~ret122#1; 9279505#L2362-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 9279503#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 9279502#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 9279501#L2607-2 assume !false; 9159944#L2608 [2023-11-28 23:58:47,940 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:47,940 INFO L85 PathProgramCache]: Analyzing trace with hash -1418857549, now seen corresponding path program 1 times [2023-11-28 23:58:47,941 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:47,941 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [507512760] [2023-11-28 23:58:47,941 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:47,941 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:47,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:48,079 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:58:48,079 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:48,079 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [507512760] [2023-11-28 23:58:48,079 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [507512760] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:48,079 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:48,079 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-28 23:58:48,079 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2069451985] [2023-11-28 23:58:48,079 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:48,080 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:58:48,080 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:48,080 INFO L85 PathProgramCache]: Analyzing trace with hash -601550786, now seen corresponding path program 1 times [2023-11-28 23:58:48,080 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:48,080 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [30489146] [2023-11-28 23:58:48,080 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:48,080 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:48,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:48,113 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2023-11-28 23:58:48,113 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:48,113 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [30489146] [2023-11-28 23:58:48,113 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [30489146] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:48,113 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:48,113 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-28 23:58:48,113 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [708793581] [2023-11-28 23:58:48,113 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:48,114 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:58:48,114 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:48,114 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-28 23:58:48,114 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-28 23:58:48,114 INFO L87 Difference]: Start difference. First operand 224063 states and 383966 transitions. cyclomatic complexity: 159921 Second operand has 6 states, 6 states have (on average 15.833333333333334) internal successors, (95), 5 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:58:51,431 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:51,431 INFO L93 Difference]: Finished difference Result 397764 states and 683415 transitions. [2023-11-28 23:58:51,431 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 397764 states and 683415 transitions. [2023-11-28 23:58:53,316 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 187864 [2023-11-28 23:58:54,468 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 397764 states to 397764 states and 683415 transitions. [2023-11-28 23:58:54,468 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 251160 [2023-11-28 23:58:55,000 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 251160 [2023-11-28 23:58:55,000 INFO L73 IsDeterministic]: Start isDeterministic. Operand 397764 states and 683415 transitions. [2023-11-28 23:58:55,021 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:58:55,022 INFO L218 hiAutomatonCegarLoop]: Abstraction has 397764 states and 683415 transitions. [2023-11-28 23:58:55,252 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 397764 states and 683415 transitions. [2023-11-28 23:58:57,506 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 397764 to 223969. [2023-11-28 23:58:57,658 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 223969 states, 223969 states have (on average 1.713531783416455) internal successors, (383778), 223968 states have internal predecessors, (383778), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:58:58,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 223969 states to 223969 states and 383778 transitions. [2023-11-28 23:58:58,664 INFO L240 hiAutomatonCegarLoop]: Abstraction has 223969 states and 383778 transitions. [2023-11-28 23:58:58,664 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-28 23:58:58,665 INFO L428 stractBuchiCegarLoop]: Abstraction has 223969 states and 383778 transitions. [2023-11-28 23:58:58,665 INFO L335 stractBuchiCegarLoop]: ======== Iteration 37 ============ [2023-11-28 23:58:58,665 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 223969 states and 383778 transitions. [2023-11-28 23:58:59,153 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 131156 [2023-11-28 23:58:59,153 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:58:59,153 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:58:59,159 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:59,159 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:58:59,160 INFO L748 eck$LassoCheckResult]: Stem: 9725330#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 9725331#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 9727874#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 9726759#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 9726760#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 9727181#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 9729297#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 9729307#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 9729829#L2208 assume !(0 == getOrigin_~person#1); 9728268#L2212 assume !(1 == getOrigin_~person#1); 9728269#L2216 assume !(2 == getOrigin_~person#1); 9729187#L2220 assume !(3 == getOrigin_~person#1); 9729876#L2224 assume !(4 == getOrigin_~person#1); 9725162#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 9725163#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 9725355#L3174 assume !(0 == initPersonOnFloor_~floor#1); 9728599#L3201 assume 1 == initPersonOnFloor_~floor#1; 9726393#L3202 assume !(0 == initPersonOnFloor_~person#1); 9726394#L3205 assume !(1 == initPersonOnFloor_~person#1); 9727580#L3208 assume !(2 == initPersonOnFloor_~person#1); 9729292#L3211 assume !(3 == initPersonOnFloor_~person#1); 9728639#L3214 assume !(4 == initPersonOnFloor_~person#1); 9728530#L3217 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 9726958#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 9726959#L2304 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 9728585#L2307 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 9725816#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 9727331#L2966 assume !(0 == callOnFloor_~floorID#1); 9725570#L2969 assume !(1 == callOnFloor_~floorID#1); 9725572#L2972 assume !(2 == callOnFloor_~floorID#1); 9728563#L2975 assume !(3 == callOnFloor_~floorID#1); 9726029#L2978 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 9726030#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 9730481#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 9730480#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 9730479#L2208-1 assume !(0 == getOrigin_~person#1); 9730478#L2212-1 assume !(1 == getOrigin_~person#1); 9730477#L2216-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 9730476#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 9730475#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 9730474#L3201-1 assume !(1 == initPersonOnFloor_~floor#1); 9730473#L3228-1 assume 2 == initPersonOnFloor_~floor#1; 9730472#L3229-2 assume !(0 == initPersonOnFloor_~person#1); 9730471#L3232-2 assume !(1 == initPersonOnFloor_~person#1); 9730468#L3235-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 9730466#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 9730465#L2304-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 9730464#L2307-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 9730462#L2310-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 9730460#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 9730459#L2966-2 assume !(0 == callOnFloor_~floorID#1); 9730458#L2969-2 assume !(1 == callOnFloor_~floorID#1); 9730457#L2972-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 9730455#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 9730453#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 9730450#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9730447#L2899 assume !(0 == isFloorCalling_~floorID#1); 9730445#L2903 assume !(1 == isFloorCalling_~floorID#1); 9730442#L2907 assume !(2 == isFloorCalling_~floorID#1); 9730439#L2911 assume !(3 == isFloorCalling_~floorID#1); 9730436#L2915 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9730433#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 9730430#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 9730427#L1425 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9728304#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 9728305#L1429 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 9729439#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 9730456#L1578 assume !(0 != timeShift_~tmp___9~2#1); 9730454#L1669 assume 1 == ~doorState~0;~doorState~0 := 0; 9730452#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9730449#L2899-3 assume !(0 == isFloorCalling_~floorID#1); 9730446#L2903-3 assume !(1 == isFloorCalling_~floorID#1); 9730444#L2907-3 assume !(2 == isFloorCalling_~floorID#1); 9730441#L2911-3 assume !(3 == isFloorCalling_~floorID#1); 9730438#L2915-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9730435#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 9730432#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 9730429#L1280 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9730227#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 9729479#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 9729480#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 9730236#L1337 assume !(1 == ~currentHeading~0); 9727587#L1347 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 9727588#L1347-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 9731154#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 9731152#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9731150#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 9731148#L2342 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 9731140#$Ultimate##3791 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 9731122#$Ultimate##3800 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 9731126#$Ultimate##3809 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 9731119#$Ultimate##3818 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 9731108#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 9731106#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 9731103#L2607-2 assume !false; 9731104#L2608 [2023-11-28 23:58:59,160 INFO L750 eck$LassoCheckResult]: Loop: 9731104#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 9816038#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 9816036#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 9816035#L2615 assume 1 != cleanup_~tmp___0~12#1; 9811896#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9811897#L2899-65 assume !(0 == isFloorCalling_~floorID#1); 9816031#L2903-65 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9815985#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 9815959#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 9815948#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 9815652#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 9815650#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9815649#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 9815648#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 9815647#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 9815646#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 9815645#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9815644#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 9815643#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 9815641#L1425-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9815640#getCurrentFloorID_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 9815638#L1429-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 9815637#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 9815636#L1578-2 assume !(0 != timeShift_~tmp___9~2#1); 9815635#L1669-3 assume !(1 == ~doorState~0); 9815634#L1669-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9815633#L2899-73 assume !(0 == isFloorCalling_~floorID#1); 9815632#L2903-73 assume !(1 == isFloorCalling_~floorID#1); 9815631#L2907-73 assume !(2 == isFloorCalling_~floorID#1); 9815630#L2911-73 assume !(3 == isFloorCalling_~floorID#1); 9815629#L2915-73 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9815628#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 9815627#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 9815625#L1280-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9815626#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 9815840#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 9815470#L1677-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 9815422#L1337-3 assume !(1 == ~currentHeading~0); 9815304#L1347-9 assume !(0 == ~currentFloorID~0); 9814427#L1347-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9814382#L1353-7 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 9814345#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9814339#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 9814337#L2342-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 9814335#$Ultimate##7403 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 9814332#$Ultimate##7412 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 9814328#$Ultimate##7421 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 9814325#$Ultimate##7430 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 9814323#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 9814322#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 9814317#L2607-2 assume !false; 9814315#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 9814312#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 9814308#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 9814304#L2615 assume 1 != cleanup_~tmp___0~12#1; 9814231#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9811346#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9811348#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 9842586#L796 assume !(0 != anyStopRequested_~tmp___3~0#1); 9842578#L800 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 9811303#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 9811304#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 9811299#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9811300#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 9811295#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 9811296#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 9811286#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 9811287#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9811275#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 9811276#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 9811264#L1425-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~14#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9811262#getCurrentFloorID_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret61#1;havoc stopRequestedAtCurrentFloor_#t~ret61#1; 9811263#L1429-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~5#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 9842568#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 9814916#L1578-2 assume !(0 != timeShift_~tmp___9~2#1); 9814914#L1669-3 assume !(1 == ~doorState~0); 9814488#L1669-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9811239#L2899-73 assume !(0 == isFloorCalling_~floorID#1); 9811240#L2903-73 assume !(1 == isFloorCalling_~floorID#1); 9811232#L2907-73 assume !(2 == isFloorCalling_~floorID#1); 9811233#L2911-73 assume !(3 == isFloorCalling_~floorID#1); 9811225#L2915-73 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9811226#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 9811217#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 9811218#L1280-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9811184#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 9811185#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 9815403#L1677-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~18#1; 9815404#L1451-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~18#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~18#1; 9815444#getReverseHeading_returnLabel#3 timeShift_#t~ret84#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret84#1;havoc timeShift_#t~ret84#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 9815443#L2899-104 assume !(0 == isFloorCalling_~floorID#1); 9815442#L2903-104 assume !(1 == isFloorCalling_~floorID#1); 9815441#L2907-104 assume !(2 == isFloorCalling_~floorID#1); 9815440#L2911-104 assume !(3 == isFloorCalling_~floorID#1); 9815439#L2915-104 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 9815438#isFloorCalling_returnLabel#105 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 9815437#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 9815435#L1280-3 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9815433#getCurrentFloorID_returnLabel#11 stopRequestedInDirection_#t~ret52#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret52#1;havoc stopRequestedInDirection_#t~ret52#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~13#1 := (if stopRequestedInDirection_~__cil_tmp8~6#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 9814970#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret85#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret85#1;havoc timeShift_#t~ret85#1; 9814966#L1686-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~18#1; 9814963#L1451-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~18#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~18#1; 9814866#getReverseHeading_returnLabel#4 timeShift_#t~ret86#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 9814867#L1337-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 9814444#isTopFloor_returnLabel#17 continueInDirection_#t~ret54#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret54#1;havoc continueInDirection_#t~ret54#1; 9814441#L1341-12 assume !(0 != continueInDirection_~tmp~11#1); 9814438#L1347-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 9814437#L1353-9 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 9814436#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 9814435#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 9812050#L2342-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 9812046#$Ultimate##7403 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 9812030#$Ultimate##7412 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 9812024#$Ultimate##7421 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 9812025#$Ultimate##7430 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 9816041#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 9816040#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 9816039#L2607-2 assume !false; 9731104#L2608 [2023-11-28 23:58:59,160 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:59,160 INFO L85 PathProgramCache]: Analyzing trace with hash 212794040, now seen corresponding path program 1 times [2023-11-28 23:58:59,160 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:59,161 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [789320466] [2023-11-28 23:58:59,161 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:59,161 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:59,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:59,228 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:58:59,228 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:59,229 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [789320466] [2023-11-28 23:58:59,229 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [789320466] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:59,229 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:59,229 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-28 23:58:59,229 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [746396721] [2023-11-28 23:58:59,229 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:59,229 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:58:59,229 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:58:59,230 INFO L85 PathProgramCache]: Analyzing trace with hash -2122137608, now seen corresponding path program 1 times [2023-11-28 23:58:59,230 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:58:59,230 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [860077525] [2023-11-28 23:58:59,230 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:58:59,230 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:58:59,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:58:59,259 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2023-11-28 23:58:59,260 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:58:59,260 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [860077525] [2023-11-28 23:58:59,260 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [860077525] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:58:59,260 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:58:59,260 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-28 23:58:59,260 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1639439589] [2023-11-28 23:58:59,260 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:58:59,260 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:58:59,261 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:58:59,261 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-28 23:58:59,261 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-28 23:58:59,261 INFO L87 Difference]: Start difference. First operand 223969 states and 383778 transitions. cyclomatic complexity: 159827 Second operand has 5 states, 5 states have (on average 19.0) internal successors, (95), 5 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:58:59,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:58:59,672 INFO L93 Difference]: Finished difference Result 108274 states and 185744 transitions. [2023-11-28 23:58:59,672 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 108274 states and 185744 transitions. [2023-11-28 23:59:00,611 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 63688 [2023-11-28 23:59:00,885 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 108274 states to 108274 states and 185744 transitions. [2023-11-28 23:59:00,885 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 68358 [2023-11-28 23:59:00,922 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 68358 [2023-11-28 23:59:00,922 INFO L73 IsDeterministic]: Start isDeterministic. Operand 108274 states and 185744 transitions. [2023-11-28 23:59:00,926 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:59:00,926 INFO L218 hiAutomatonCegarLoop]: Abstraction has 108274 states and 185744 transitions. [2023-11-28 23:59:00,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108274 states and 185744 transitions. [2023-11-28 23:59:01,758 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108274 to 108274. [2023-11-28 23:59:01,824 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108274 states, 108274 states have (on average 1.7154995659161016) internal successors, (185744), 108273 states have internal predecessors, (185744), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:59:02,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108274 states to 108274 states and 185744 transitions. [2023-11-28 23:59:02,320 INFO L240 hiAutomatonCegarLoop]: Abstraction has 108274 states and 185744 transitions. [2023-11-28 23:59:02,320 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-28 23:59:02,320 INFO L428 stractBuchiCegarLoop]: Abstraction has 108274 states and 185744 transitions. [2023-11-28 23:59:02,320 INFO L335 stractBuchiCegarLoop]: ======== Iteration 38 ============ [2023-11-28 23:59:02,321 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 108274 states and 185744 transitions. [2023-11-28 23:59:02,549 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 63688 [2023-11-28 23:59:02,549 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:59:02,549 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:59:02,554 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:59:02,554 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:59:02,555 INFO L748 eck$LassoCheckResult]: Stem: 10057575#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 10057576#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 10060001#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 10058947#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 10058948#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 10059349#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 10061361#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 10061369#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 10061793#L2208 assume !(0 == getOrigin_~person#1); 10060389#L2212 assume !(1 == getOrigin_~person#1); 10060390#L2216 assume !(2 == getOrigin_~person#1); 10061261#L2220 assume !(3 == getOrigin_~person#1); 10061830#L2224 assume !(4 == getOrigin_~person#1); 10057412#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 10057413#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 10057599#L3174 assume !(0 == initPersonOnFloor_~floor#1); 10060706#L3201 assume 1 == initPersonOnFloor_~floor#1; 10058588#L3202 assume !(0 == initPersonOnFloor_~person#1); 10058589#L3205 assume !(1 == initPersonOnFloor_~person#1); 10059726#L3208 assume !(2 == initPersonOnFloor_~person#1); 10061355#L3211 assume !(3 == initPersonOnFloor_~person#1); 10060746#L3214 assume !(4 == initPersonOnFloor_~person#1); 10060641#L3217 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 10059140#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 10059141#L2304 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 10060694#L2307 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 10058034#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 10059491#L2966 assume !(0 == callOnFloor_~floorID#1); 10057800#L2969 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 10057801#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 10059244#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 10058491#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 10058127#L2208-1 assume !(0 == getOrigin_~person#1); 10058128#L2212-1 assume !(1 == getOrigin_~person#1); 10059602#L2216-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 10058413#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 10057975#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 10057976#L3201-1 assume !(1 == initPersonOnFloor_~floor#1); 10057206#L3228-1 assume 2 == initPersonOnFloor_~floor#1; 10057207#L3229-2 assume !(0 == initPersonOnFloor_~person#1); 10058910#L3232-2 assume !(1 == initPersonOnFloor_~person#1); 10057259#L3235-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 10057260#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 10059633#L2304-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 10059356#L2307-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 10059357#L2310-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 10058279#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 10060137#L2966-2 assume !(0 == callOnFloor_~floorID#1); 10060258#L2969-2 assume !(1 == callOnFloor_~floorID#1); 10061520#L2972-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 10061526#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 10060253#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 10059458#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10059459#L2899 assume !(0 == isFloorCalling_~floorID#1); 10061850#L2903 assume !(1 == isFloorCalling_~floorID#1); 10060109#L2907 assume !(2 == isFloorCalling_~floorID#1); 10060110#L2911 assume !(3 == isFloorCalling_~floorID#1); 10060955#L2915 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10057217#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 10057218#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 10058435#L1425 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 10058436#L1399-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 10062025#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 10057371#L705-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 10057372#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 10060861#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 10057928#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 10057929#L1578 assume !(0 != timeShift_~tmp___9~2#1); 10060143#L1669 assume 1 == ~doorState~0;~doorState~0 := 0; 10060144#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10060113#L2899-3 assume !(0 == isFloorCalling_~floorID#1); 10060114#L2903-3 assume !(1 == isFloorCalling_~floorID#1); 10062072#L2907-3 assume !(2 == isFloorCalling_~floorID#1); 10057285#L2911-3 assume !(3 == isFloorCalling_~floorID#1); 10057286#L2915-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10058428#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 10058429#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 10059699#L1280 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1; 10059700#L1302 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~14#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~14#1; 10057856#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 10059607#L1246 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 10060065#L892-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 10059109#L1061-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; 10059110#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1; 10057485#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~13#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 10061515#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 10061516#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 10061827#L1337 assume !(1 == ~currentHeading~0); 10059733#L1347 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 10059734#L1347-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 10061997#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 10061452#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 10069312#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 10069311#L2342 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 10069303#$Ultimate##3791 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 10069287#$Ultimate##3800 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 10069291#$Ultimate##3809 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 10069284#$Ultimate##3818 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 10069281#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 10069279#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 10069277#L2607-2 assume !false; 10069278#L2608 [2023-11-28 23:59:02,555 INFO L750 eck$LassoCheckResult]: Loop: 10069278#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 10115268#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 10115267#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 10115266#L2615 assume 1 != cleanup_~tmp___0~12#1; 10115265#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10115264#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10115263#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 10115261#L796 assume !(0 != anyStopRequested_~tmp___3~0#1); 10115253#L800 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 10115247#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 10115246#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 10115245#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10115244#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 10115243#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 10115242#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 10115241#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 10115240#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10115239#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 10115238#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 10115237#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 10115235#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 10115236#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 10108648#L705-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 10108649#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 10121937#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 10121936#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 10121935#L1578-2 assume !(0 != timeShift_~tmp___9~2#1); 10103845#L1669-3 assume !(1 == ~doorState~0); 10103843#L1669-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10103842#L2899-73 assume !(0 == isFloorCalling_~floorID#1); 10103841#L2903-73 assume !(1 == isFloorCalling_~floorID#1); 10103840#L2907-73 assume !(2 == isFloorCalling_~floorID#1); 10103838#L2911-73 assume !(3 == isFloorCalling_~floorID#1); 10103839#L2915-73 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10115328#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 10115326#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 10103833#L1280-2 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1; 10103832#L1302-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~14#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~14#1; 10103826#isAnyLiftButtonPressed_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 10103827#L1246-2 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 10115303#L892-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 10115035#L1061-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; 10115032#stopRequestedInDirection__wrappee__empty_returnLabel#9 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1; 10103743#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#3 stopRequestedInDirection_#t~ret53#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~13#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 10103744#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 10115021#L1677-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 10115018#L1337-3 assume !(1 == ~currentHeading~0); 10063943#L1347-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 10115010#L1347-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 10066778#L1353-7 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 10115003#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 10114999#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 10114996#L2342-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 10114994#$Ultimate##7403 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 10114993#$Ultimate##7412 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 10114987#$Ultimate##7421 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 10114984#$Ultimate##7430 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 10114981#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 10114980#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 10114979#L2607-2 assume !false; 10114978#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 10114972#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 10114970#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 10114968#L2615 assume 1 != cleanup_~tmp___0~12#1; 10114966#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10114963#L2899-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10114961#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 10114958#L796 assume !(0 != anyStopRequested_~tmp___3~0#1); 10114937#L800 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 10114926#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 10114924#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 10114921#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10114919#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 10114916#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 10114915#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 10114914#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 10114912#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10114909#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 10114908#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 10114904#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 10114901#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 10114886#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 10114882#L705-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 10114883#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 10158541#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 10158535#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 10158533#L1578-2 assume !(0 != timeShift_~tmp___9~2#1); 10061629#L1669-3 assume !(1 == ~doorState~0); 10058582#L1669-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10058583#L2899-73 assume !(0 == isFloorCalling_~floorID#1); 10060931#L2903-73 assume !(1 == isFloorCalling_~floorID#1); 10060932#L2907-73 assume !(2 == isFloorCalling_~floorID#1); 10060076#L2911-73 assume !(3 == isFloorCalling_~floorID#1); 10059832#L2915-73 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10059833#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 10057344#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 10057345#L1280-2 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1; 10057993#L1302-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~14#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~14#1; 10058475#isAnyLiftButtonPressed_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 10056849#L1246-2 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 10056851#L892-8 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 10058447#isTopFloor_returnLabel#12 stopRequestedInDirection__wrappee__empty_#t~ret36#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~8#1 := stopRequestedInDirection__wrappee__empty_#t~ret36#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1; 10058845#L896-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~8#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; 10059701#stopRequestedInDirection__wrappee__empty_returnLabel#9 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1; 10146992#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#3 stopRequestedInDirection_#t~ret53#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~13#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 10146991#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 10146990#L1677-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~18#1; 10146988#L1451-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~18#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~18#1; 10146987#getReverseHeading_returnLabel#3 timeShift_#t~ret84#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret84#1;havoc timeShift_#t~ret84#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10146986#L2899-104 assume !(0 == isFloorCalling_~floorID#1); 10146985#L2903-104 assume !(1 == isFloorCalling_~floorID#1); 10137849#L2907-104 assume !(2 == isFloorCalling_~floorID#1); 10115330#L2911-104 assume !(3 == isFloorCalling_~floorID#1); 10115329#L2915-104 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10115327#isFloorCalling_returnLabel#105 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 10115325#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 10115324#L1280-3 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1; 10115323#L1302-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~14#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~14#1; 10115313#isAnyLiftButtonPressed_returnLabel#4 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 10115310#L1246-3 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 10115309#L892-11 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 10115308#isTopFloor_returnLabel#16 stopRequestedInDirection__wrappee__empty_#t~ret36#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~8#1 := stopRequestedInDirection__wrappee__empty_#t~ret36#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1; 10115307#L896-11 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~8#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; 10115306#stopRequestedInDirection__wrappee__empty_returnLabel#12 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1; 10115302#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#4 stopRequestedInDirection_#t~ret53#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~13#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 10115301#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret85#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret85#1;havoc timeShift_#t~ret85#1; 10115300#L1686-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~18#1; 10115290#L1451-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~18#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~18#1; 10115289#getReverseHeading_returnLabel#4 timeShift_#t~ret86#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 10115287#L1337-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 10115286#isTopFloor_returnLabel#17 continueInDirection_#t~ret54#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret54#1;havoc continueInDirection_#t~ret54#1; 10115285#L1341-12 assume !(0 != continueInDirection_~tmp~11#1); 10115284#L1347-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 10115283#L1353-9 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 10115282#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 10115281#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 10115280#L2342-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 10115278#$Ultimate##7403 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 10115272#$Ultimate##7412 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 10104765#$Ultimate##7421 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 10104763#$Ultimate##7430 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 10115271#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 10115270#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 10115269#L2607-2 assume !false; 10069278#L2608 [2023-11-28 23:59:02,556 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:59:02,556 INFO L85 PathProgramCache]: Analyzing trace with hash 1444012321, now seen corresponding path program 1 times [2023-11-28 23:59:02,556 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:59:02,556 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1051135090] [2023-11-28 23:59:02,556 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:59:02,556 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:59:02,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:59:02,590 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:59:02,590 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:59:02,591 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1051135090] [2023-11-28 23:59:02,591 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1051135090] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:59:02,591 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:59:02,591 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-28 23:59:02,591 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1405753534] [2023-11-28 23:59:02,591 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:59:02,591 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:59:02,592 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:59:02,592 INFO L85 PathProgramCache]: Analyzing trace with hash -701599852, now seen corresponding path program 1 times [2023-11-28 23:59:02,592 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:59:02,592 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1186545313] [2023-11-28 23:59:02,592 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:59:02,592 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:59:02,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:59:02,674 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 45 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2023-11-28 23:59:02,674 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:59:02,674 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1186545313] [2023-11-28 23:59:02,674 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1186545313] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:59:02,675 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:59:02,675 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-28 23:59:02,675 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1187200806] [2023-11-28 23:59:02,675 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:59:02,675 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:59:02,675 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:59:02,676 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-28 23:59:02,676 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-28 23:59:02,676 INFO L87 Difference]: Start difference. First operand 108274 states and 185744 transitions. cyclomatic complexity: 77479 Second operand has 3 states, 3 states have (on average 33.666666666666664) internal successors, (101), 2 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:59:03,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:59:03,475 INFO L93 Difference]: Finished difference Result 212313 states and 364241 transitions. [2023-11-28 23:59:03,476 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 212313 states and 364241 transitions. [2023-11-28 23:59:04,764 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 125344 [2023-11-28 23:59:05,372 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 212313 states to 212313 states and 364241 transitions. [2023-11-28 23:59:05,373 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 133777 [2023-11-28 23:59:05,448 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 133777 [2023-11-28 23:59:05,448 INFO L73 IsDeterministic]: Start isDeterministic. Operand 212313 states and 364241 transitions. [2023-11-28 23:59:05,449 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:59:05,449 INFO L218 hiAutomatonCegarLoop]: Abstraction has 212313 states and 364241 transitions. [2023-11-28 23:59:05,565 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 212313 states and 364241 transitions. [2023-11-28 23:59:07,376 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 212313 to 212313. [2023-11-28 23:59:07,481 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 212313 states, 212313 states have (on average 1.7155850089255016) internal successors, (364241), 212312 states have internal predecessors, (364241), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:59:08,037 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 212313 states to 212313 states and 364241 transitions. [2023-11-28 23:59:08,037 INFO L240 hiAutomatonCegarLoop]: Abstraction has 212313 states and 364241 transitions. [2023-11-28 23:59:08,038 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-28 23:59:08,038 INFO L428 stractBuchiCegarLoop]: Abstraction has 212313 states and 364241 transitions. [2023-11-28 23:59:08,038 INFO L335 stractBuchiCegarLoop]: ======== Iteration 39 ============ [2023-11-28 23:59:08,038 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 212313 states and 364241 transitions. [2023-11-28 23:59:08,552 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 125344 [2023-11-28 23:59:08,552 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:59:08,553 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:59:08,568 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:59:08,568 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:59:08,568 INFO L748 eck$LassoCheckResult]: Stem: 10378167#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 10378168#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 10380599#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 10379552#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 10379553#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 10379949#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 10381897#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 10381903#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 10382314#L2208 assume !(0 == getOrigin_~person#1); 10380970#L2212 assume !(1 == getOrigin_~person#1); 10380971#L2216 assume !(2 == getOrigin_~person#1); 10381800#L2220 assume !(3 == getOrigin_~person#1); 10382346#L2224 assume !(4 == getOrigin_~person#1); 10378004#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 10378005#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 10378201#L3174 assume !(0 == initPersonOnFloor_~floor#1); 10381261#L3201 assume 1 == initPersonOnFloor_~floor#1; 10379190#L3202 assume !(0 == initPersonOnFloor_~person#1); 10379191#L3205 assume !(1 == initPersonOnFloor_~person#1); 10380315#L3208 assume !(2 == initPersonOnFloor_~person#1); 10381893#L3211 assume !(3 == initPersonOnFloor_~person#1); 10381297#L3214 assume !(4 == initPersonOnFloor_~person#1); 10381205#L3217 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 10379741#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 10379742#L2304 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 10381248#L2307 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 10378628#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 10380083#L2966 assume !(0 == callOnFloor_~floorID#1); 10378403#L2969 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 10378404#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 10379840#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 10379087#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 10378720#L2208-1 assume !(0 == getOrigin_~person#1); 10378721#L2212-1 assume !(1 == getOrigin_~person#1); 10380200#L2216-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 10379010#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 10378573#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 10378574#L3201-1 assume !(1 == initPersonOnFloor_~floor#1); 10377801#L3228-1 assume 2 == initPersonOnFloor_~floor#1; 10377802#L3229-2 assume !(0 == initPersonOnFloor_~person#1); 10379516#L3232-2 assume !(1 == initPersonOnFloor_~person#1); 10377858#L3235-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 10377859#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 10380229#L2304-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 10379957#L2307-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 10379958#L2310-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 10378868#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 10380726#L2966-2 assume !(0 == callOnFloor_~floorID#1); 10380842#L2969-2 assume !(1 == callOnFloor_~floorID#1); 10382057#L2972-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 10382061#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 10380839#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 10380058#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10380059#L2899 assume !(0 == isFloorCalling_~floorID#1); 10382363#L2903 assume !(1 == isFloorCalling_~floorID#1); 10380696#L2907 assume !(2 == isFloorCalling_~floorID#1); 10380697#L2911 assume !(3 == isFloorCalling_~floorID#1); 10381499#L2915 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10377816#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 10377817#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 10379032#L1425 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 10379033#L1399-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 10382537#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 10377968#L705-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 10377969#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 10381407#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 10378527#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 10378528#L1578 assume !(0 != timeShift_~tmp___9~2#1); 10380732#L1669 assume 1 == ~doorState~0;~doorState~0 := 0; 10380733#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10380704#L2899-3 assume !(0 == isFloorCalling_~floorID#1); 10380705#L2903-3 assume !(1 == isFloorCalling_~floorID#1); 10382573#L2907-3 assume !(2 == isFloorCalling_~floorID#1); 10377874#L2911-3 assume !(3 == isFloorCalling_~floorID#1); 10377875#L2915-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10379025#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 10379026#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 10380296#L1280 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1; 10380297#L1302 assume !(0 != ~floorButtons_0~0); 10378459#L1306 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~14#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~14#1; 10378460#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 10380203#L1246 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 10380660#L892-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 10379703#L1061-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; 10379704#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1; 10378086#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~13#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 10382050#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 10382051#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 10382341#L1337 assume !(1 == ~currentHeading~0); 10380328#L1347 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 10380329#L1347-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 10382512#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 10381984#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 10382738#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 10382739#L2342 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 10383536#$Ultimate##3791 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 10383514#$Ultimate##3800 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 10383518#$Ultimate##3809 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 10383511#$Ultimate##3818 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 10383500#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 10383498#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 10383495#L2607-2 assume !false; 10383496#L2608 [2023-11-28 23:59:08,569 INFO L750 eck$LassoCheckResult]: Loop: 10383496#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 10484348#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 10484346#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 10484344#L2615 assume 1 != cleanup_~tmp___0~12#1; 10484332#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10484329#L2899-65 assume !(0 == isFloorCalling_~floorID#1); 10484330#L2903-65 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10485265#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 10484307#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 10484297#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 10484296#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 10484295#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10484293#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 10484292#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 10484288#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 10484286#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 10484274#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10484272#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 10484270#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 10484268#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 10484265#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 10484266#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 10520673#L705-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 10520670#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 10520671#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 10546037#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 10545980#L1578-2 assume !(0 != timeShift_~tmp___9~2#1); 10459748#L1669-3 assume !(1 == ~doorState~0); 10459744#L1669-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10459742#L2899-73 assume !(0 == isFloorCalling_~floorID#1); 10459740#L2903-73 assume !(1 == isFloorCalling_~floorID#1); 10459738#L2907-73 assume !(2 == isFloorCalling_~floorID#1); 10459736#L2911-73 assume !(3 == isFloorCalling_~floorID#1); 10459734#L2915-73 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10459732#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 10459730#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 10459728#L1280-2 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1; 10459726#L1302-2 assume !(0 != ~floorButtons_0~0); 10459719#L1306-2 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~14#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~14#1; 10459716#isAnyLiftButtonPressed_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 10459712#L1246-2 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 10459713#L892-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 10460004#L1061-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; 10459639#stopRequestedInDirection__wrappee__empty_returnLabel#9 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1; 10459635#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#3 stopRequestedInDirection_#t~ret53#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~13#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 10459633#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 10459627#L1677-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 10459628#L1337-3 assume !(1 == ~currentHeading~0); 10508011#L1347-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 10472550#L1347-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 10459622#L1353-7 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 10576262#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 10576261#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 10576260#L2342-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 10576259#$Ultimate##7403 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 10576258#$Ultimate##7412 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 10576257#$Ultimate##7421 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 10576256#$Ultimate##7430 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 10576251#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 10576249#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 10576248#L2607-2 assume !false; 10576247#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 10576246#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 10576245#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 10576244#L2615 assume 1 != cleanup_~tmp___0~12#1; 10576243#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10576236#L2899-65 assume !(0 == isFloorCalling_~floorID#1); 10576237#L2903-65 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10580580#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 10580564#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 10580555#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 10580554#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 10580501#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10580453#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 10580452#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 10580451#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 10580450#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 10580449#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10570978#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 10570977#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 10570976#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 10570974#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 10570975#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 10573641#L705-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 10573637#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 10573638#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 10587323#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 10587303#L1578-2 assume !(0 != timeShift_~tmp___9~2#1); 10539696#L1669-3 assume !(1 == ~doorState~0); 10539691#L1669-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10539689#L2899-73 assume !(0 == isFloorCalling_~floorID#1); 10539688#L2903-73 assume !(1 == isFloorCalling_~floorID#1); 10539687#L2907-73 assume !(2 == isFloorCalling_~floorID#1); 10539684#L2911-73 assume !(3 == isFloorCalling_~floorID#1); 10539683#L2915-73 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10539682#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 10539681#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 10539679#L1280-2 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1; 10539677#L1302-2 assume !(0 != ~floorButtons_0~0); 10537111#L1306-2 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~14#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~14#1; 10539670#isAnyLiftButtonPressed_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 10539667#L1246-2 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 10539666#L892-8 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 10539665#isTopFloor_returnLabel#12 stopRequestedInDirection__wrappee__empty_#t~ret36#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~8#1 := stopRequestedInDirection__wrappee__empty_#t~ret36#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1; 10539662#L896-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~8#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; 10539661#stopRequestedInDirection__wrappee__empty_returnLabel#9 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1; 10539657#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#3 stopRequestedInDirection_#t~ret53#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~13#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 10539656#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 10539655#L1677-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~18#1; 10539654#L1451-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~18#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~18#1; 10539652#getReverseHeading_returnLabel#3 timeShift_#t~ret84#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret84#1;havoc timeShift_#t~ret84#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 10539650#L2899-104 assume !(0 == isFloorCalling_~floorID#1); 10539648#L2903-104 assume !(1 == isFloorCalling_~floorID#1); 10539646#L2907-104 assume !(2 == isFloorCalling_~floorID#1); 10539644#L2911-104 assume !(3 == isFloorCalling_~floorID#1); 10539643#L2915-104 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 10539642#isFloorCalling_returnLabel#105 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 10539640#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 10539638#L1280-3 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1; 10539637#L1302-3 assume !(0 != ~floorButtons_0~0); 10537069#L1306-3 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~14#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~14#1; 10539631#isAnyLiftButtonPressed_returnLabel#4 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 10539628#L1246-3 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 10539626#L892-11 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 10539624#isTopFloor_returnLabel#16 stopRequestedInDirection__wrappee__empty_#t~ret36#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~8#1 := stopRequestedInDirection__wrappee__empty_#t~ret36#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1; 10536429#L896-11 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~8#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; 10536425#stopRequestedInDirection__wrappee__empty_returnLabel#12 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1; 10536422#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#4 stopRequestedInDirection_#t~ret53#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~13#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 10536421#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret85#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret85#1;havoc timeShift_#t~ret85#1; 10536420#L1686-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~18#1; 10536419#L1451-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~18#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~18#1; 10536418#getReverseHeading_returnLabel#4 timeShift_#t~ret86#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 10484394#L1337-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 10484392#isTopFloor_returnLabel#17 continueInDirection_#t~ret54#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret54#1;havoc continueInDirection_#t~ret54#1; 10484390#L1341-12 assume !(0 != continueInDirection_~tmp~11#1); 10484389#L1347-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 10484388#L1353-9 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 10484387#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 10484386#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 10484385#L2342-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 10484381#$Ultimate##7403 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 10484379#L2358-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 10484380#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret122#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret122#1;havoc __utac_acc__Specification1_spec__3_#t~ret122#1; 10484360#L2362-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 10484355#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 10484352#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 10484351#L2607-2 assume !false; 10383496#L2608 [2023-11-28 23:59:08,569 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:59:08,569 INFO L85 PathProgramCache]: Analyzing trace with hash -977378610, now seen corresponding path program 1 times [2023-11-28 23:59:08,569 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:59:08,569 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [989704294] [2023-11-28 23:59:08,569 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:59:08,570 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:59:08,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:59:08,625 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:59:08,626 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:59:08,626 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [989704294] [2023-11-28 23:59:08,626 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [989704294] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:59:08,626 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:59:08,626 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-28 23:59:08,626 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [300045710] [2023-11-28 23:59:08,626 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:59:08,627 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:59:08,627 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:59:08,627 INFO L85 PathProgramCache]: Analyzing trace with hash -1245834041, now seen corresponding path program 1 times [2023-11-28 23:59:08,627 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:59:08,627 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1480668518] [2023-11-28 23:59:08,627 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:59:08,628 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:59:08,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:59:08,673 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2023-11-28 23:59:08,673 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:59:08,673 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1480668518] [2023-11-28 23:59:08,673 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1480668518] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:59:08,673 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:59:08,674 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-28 23:59:08,674 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1421652611] [2023-11-28 23:59:08,674 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:59:08,674 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:59:08,674 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:59:08,674 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-28 23:59:08,675 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-28 23:59:08,675 INFO L87 Difference]: Start difference. First operand 212313 states and 364241 transitions. cyclomatic complexity: 151937 Second operand has 3 states, 3 states have (on average 34.0) internal successors, (102), 2 states have internal predecessors, (102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:59:10,514 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:59:10,515 INFO L93 Difference]: Finished difference Result 421169 states and 722058 transitions. [2023-11-28 23:59:10,515 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 421169 states and 722058 transitions. [2023-11-28 23:59:12,528 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 249164 [2023-11-28 23:59:14,088 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 421169 states to 421169 states and 722058 transitions. [2023-11-28 23:59:14,088 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 265069 [2023-11-28 23:59:14,245 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 265069 [2023-11-28 23:59:14,245 INFO L73 IsDeterministic]: Start isDeterministic. Operand 421169 states and 722058 transitions. [2023-11-28 23:59:14,246 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:59:14,246 INFO L218 hiAutomatonCegarLoop]: Abstraction has 421169 states and 722058 transitions. [2023-11-28 23:59:14,477 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 421169 states and 722058 transitions. [2023-11-28 23:59:18,015 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 421169 to 421169. [2023-11-28 23:59:18,257 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 421169 states, 421169 states have (on average 1.7144139288504139) internal successors, (722058), 421168 states have internal predecessors, (722058), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:59:19,200 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421169 states to 421169 states and 722058 transitions. [2023-11-28 23:59:19,200 INFO L240 hiAutomatonCegarLoop]: Abstraction has 421169 states and 722058 transitions. [2023-11-28 23:59:19,201 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-28 23:59:19,201 INFO L428 stractBuchiCegarLoop]: Abstraction has 421169 states and 722058 transitions. [2023-11-28 23:59:19,201 INFO L335 stractBuchiCegarLoop]: ======== Iteration 40 ============ [2023-11-28 23:59:19,201 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 421169 states and 722058 transitions. [2023-11-28 23:59:20,584 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 249164 [2023-11-28 23:59:20,585 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-28 23:59:20,585 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-28 23:59:20,607 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:59:20,607 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-28 23:59:20,608 INFO L748 eck$LassoCheckResult]: Stem: 11011654#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 11011655#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret139#1, main_~retValue_acc~26#1, main_~tmp~29#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~29#1;assume { :begin_inline_select_helpers } true; 11014128#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 11013056#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;havoc valid_product_~retValue_acc~31#1;valid_product_~retValue_acc~31#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~31#1; 11013057#valid_product_returnLabel#1 main_#t~ret139#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~31#1;assume { :end_inline_valid_product } true;main_~tmp~29#1 := main_#t~ret139#1;havoc main_#t~ret139#1; 11013471#L2803 assume 0 != main_~tmp~29#1;assume { :begin_inline_setup } true; 11015497#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 11015506#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;havoc bigMacCall_~tmp~26#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 11015973#L2208 assume !(0 == getOrigin_~person#1); 11014499#L2212 assume !(1 == getOrigin_~person#1); 11014500#L2216 assume !(2 == getOrigin_~person#1); 11015388#L2220 assume !(3 == getOrigin_~person#1); 11016016#L2224 assume !(4 == getOrigin_~person#1); 11011490#L2228 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 11011491#getOrigin_returnLabel#1 bigMacCall_#t~ret132#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~26#1 := bigMacCall_#t~ret132#1;havoc bigMacCall_#t~ret132#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~26#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 11011688#L3174 assume !(0 == initPersonOnFloor_~floor#1); 11014813#L3201 assume 1 == initPersonOnFloor_~floor#1; 11012687#L3202 assume !(0 == initPersonOnFloor_~person#1); 11012688#L3205 assume !(1 == initPersonOnFloor_~person#1); 11013846#L3208 assume !(2 == initPersonOnFloor_~person#1); 11015489#L3211 assume !(3 == initPersonOnFloor_~person#1); 11014850#L3214 assume !(4 == initPersonOnFloor_~person#1); 11014747#L3217 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 11013250#L3282-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 11013251#L2304 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 11014799#L2307 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 11012130#L2316-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 11013608#L2966 assume !(0 == callOnFloor_~floorID#1); 11011889#L2969 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 11011890#L2978-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 11013359#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 11012588#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret132#1, bigMacCall_~tmp~26#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;havoc angelinaCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 11012222#L2208-1 assume !(0 == getOrigin_~person#1); 11012223#L2212-1 assume !(1 == getOrigin_~person#1); 11013728#L2216-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 11012514#getOrigin_returnLabel#2 angelinaCall_#t~ret129#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~23#1 := angelinaCall_#t~ret129#1;havoc angelinaCall_#t~ret129#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 11012070#L3174-1 assume !(0 == initPersonOnFloor_~floor#1); 11012071#L3201-1 assume !(1 == initPersonOnFloor_~floor#1); 11011287#L3228-1 assume 2 == initPersonOnFloor_~floor#1; 11011288#L3229-2 assume !(0 == initPersonOnFloor_~person#1); 11013020#L3232-2 assume !(1 == initPersonOnFloor_~person#1); 11011344#L3235-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 11011345#L3282-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 11013757#L2304-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 11013479#L2307-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 11013480#L2310-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 11012369#L2316-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 11014263#L2966-2 assume !(0 == callOnFloor_~floorID#1); 11014375#L2969-2 assume !(1 == callOnFloor_~floorID#1); 11015679#L2972-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 11015683#L2978-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 11014372#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 11013580#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret129#1, angelinaCall_~tmp~23#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret133#1, cleanup_#t~ret134#1, cleanup_~i~3#1, cleanup_~tmp~27#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~3#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~27#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~3#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 11013581#L2899 assume !(0 == isFloorCalling_~floorID#1); 11016036#L2903 assume !(1 == isFloorCalling_~floorID#1); 11014228#L2907 assume !(2 == isFloorCalling_~floorID#1); 11014229#L2911 assume !(3 == isFloorCalling_~floorID#1); 11015075#L2915 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 11011302#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 11011303#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 11012537#L1425 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 11012538#L1399-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 11016225#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 11011454#L705-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 11011455#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 11014973#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 11012022#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 11012023#L1578 assume !(0 != timeShift_~tmp___9~2#1); 11014269#L1669 assume 1 == ~doorState~0;~doorState~0 := 0; 11014270#L1669-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 11014237#L2899-3 assume !(0 == isFloorCalling_~floorID#1); 11014238#L2903-3 assume !(1 == isFloorCalling_~floorID#1); 11016270#L2907-3 assume !(2 == isFloorCalling_~floorID#1); 11011360#L2911-3 assume !(3 == isFloorCalling_~floorID#1); 11011361#L2915-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 11012530#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 11012531#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 11013825#L1280 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1; 11013826#L1302 assume !(0 != ~floorButtons_0~0); 11011947#L1306 assume !(0 != ~floorButtons_1~0); 11011948#L1310 assume 0 != ~floorButtons_2~0;isAnyLiftButtonPressed_~retValue_acc~14#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~14#1; 11012753#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 11013732#L1246 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 11014190#L892-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 11013213#L1061-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; 11013214#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1; 11011571#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret53#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~13#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 11015671#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 11015672#L1677 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 11016011#L1337 assume !(1 == ~currentHeading~0); 11013859#L1347 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 11013860#L1347-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 11016450#L1353-1 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 11031046#L1686-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 11031044#getCurrentFloorID_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 11031042#L2342 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 11031033#$Ultimate##3791 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 11031021#$Ultimate##3800 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 11031025#$Ultimate##3809 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 11031018#$Ultimate##3818 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 11031015#L2402 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 11031013#timeShift_returnLabel#1 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 11031011#L2607-2 assume !false; 11031012#L2608 [2023-11-28 23:59:20,608 INFO L750 eck$LassoCheckResult]: Loop: 11031012#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 11238934#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 11238933#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 11238922#L2615 assume 1 != cleanup_~tmp___0~12#1; 11238919#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 11238917#L2899-65 assume !(0 == isFloorCalling_~floorID#1); 11238918#L2903-65 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 11238928#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 11238900#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 11238774#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 11238724#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 11238720#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 11238718#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 11238716#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 11238714#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 11238713#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 11234790#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 11234789#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 11231259#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 11231258#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 11230788#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 11230393#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 11230390#L705-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 11227746#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 11227747#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 11234874#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 11234873#L1578-2 assume !(0 != timeShift_~tmp___9~2#1); 11220352#L1669-3 assume !(1 == ~doorState~0); 11220319#L1669-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 11220317#L2899-73 assume !(0 == isFloorCalling_~floorID#1); 11220316#L2903-73 assume !(1 == isFloorCalling_~floorID#1); 11220315#L2907-73 assume !(2 == isFloorCalling_~floorID#1); 11220314#L2911-73 assume !(3 == isFloorCalling_~floorID#1); 11220307#L2915-73 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 11220304#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 11220301#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 11220300#L1280-2 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1; 11207341#L1302-2 assume !(0 != ~floorButtons_0~0); 11207340#L1306-2 assume !(0 != ~floorButtons_1~0); 11200598#L1310-2 assume 0 != ~floorButtons_2~0;isAnyLiftButtonPressed_~retValue_acc~14#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~14#1; 11207334#isAnyLiftButtonPressed_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 11207330#L1246-2 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 11207160#L892-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 11207161#L1061-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; 11205382#stopRequestedInDirection__wrappee__empty_returnLabel#9 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1; 11205378#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#3 stopRequestedInDirection_#t~ret53#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~13#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 11205376#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 11205373#L1677-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 11205169#L1337-3 assume !(1 == ~currentHeading~0); 11205162#L1347-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 11205094#L1347-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 11171687#L1353-7 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 11393651#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 11393648#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 11393645#L2342-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 11393642#$Ultimate##7403 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 11393639#$Ultimate##7412 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 11393636#$Ultimate##7421 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 11393634#$Ultimate##7430 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 11393632#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 11393399#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 11393398#L2607-2 assume !false; 11393397#L2608 cleanup_~__cil_tmp4~3#1 := ~cleanupTimeShifts~0 - 1; 11393396#L2611 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~3#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;havoc isBlocked_~retValue_acc~3#1;isBlocked_~retValue_acc~3#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~3#1; 11393395#isBlocked_returnLabel#1 cleanup_#t~ret133#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~3#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 11393394#L2615 assume 1 != cleanup_~tmp___0~12#1; 11393392#L2615-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;havoc isIdle_~retValue_acc~10#1;havoc isIdle_~tmp~7#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~9#1;havoc anyStopRequested_~tmp~6#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 11392279#L2899-65 assume !(0 == isFloorCalling_~floorID#1); 11392280#L2903-65 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 11393581#isFloorCalling_returnLabel#66 anyStopRequested_#t~ret30#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret30#1;havoc anyStopRequested_#t~ret30#1; 11393563#L796 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~9#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~9#1; 11393553#anyStopRequested_returnLabel#1 isIdle_#t~ret35#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret30#1, anyStopRequested_#t~ret31#1, anyStopRequested_#t~ret32#1, anyStopRequested_#t~ret33#1, anyStopRequested_#t~ret34#1, anyStopRequested_~retValue_acc~9#1, anyStopRequested_~tmp~6#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~7#1 := isIdle_#t~ret35#1;havoc isIdle_#t~ret35#1;isIdle_~retValue_acc~10#1 := (if 0 == isIdle_~tmp~7#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~10#1; 11393551#isIdle_returnLabel#1 cleanup_#t~ret134#1 := isIdle_#res#1;havoc isIdle_#t~ret35#1, isIdle_~retValue_acc~10#1, isIdle_~tmp~7#1;assume { :end_inline_isIdle } true;cleanup_~tmp~27#1 := cleanup_#t~ret134#1;havoc cleanup_#t~ret134#1; 11393549#L2627 assume !(0 != cleanup_~tmp~27#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~16#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~14#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 11393547#L2899-70 assume !(0 == isFloorCalling_~floorID#1); 11393545#L2903-70 assume !(1 == isFloorCalling_~floorID#1); 11393543#L2907-70 assume !(2 == isFloorCalling_~floorID#1); 11393541#L2911-70 assume !(3 == isFloorCalling_~floorID#1); 11393539#L2915-70 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 11393537#isFloorCalling_returnLabel#71 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 11393535#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~14#1 := stopRequestedAtCurrentFloor_#t~ret60#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1; 11393533#L1425-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~14#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1 / 3); 11393517#L1399-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 11393515#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 11393511#L705-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 11393512#buttonForFloorIsPressed_returnLabel#7 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1; 11430297#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret63#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret57#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret58#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret59#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~4#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret63#1;havoc stopRequestedAtCurrentFloor_#t~ret63#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 11430291#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret76#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret60#1, stopRequestedAtCurrentFloor_#t~ret61#1, stopRequestedAtCurrentFloor_#t~ret62#1, stopRequestedAtCurrentFloor_#t~ret63#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~14#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret76#1;havoc timeShift_#t~ret76#1; 11430289#L1578-2 assume !(0 != timeShift_~tmp___9~2#1); 11391133#L1669-3 assume !(1 == ~doorState~0); 11391118#L1669-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 11391115#L2899-73 assume !(0 == isFloorCalling_~floorID#1); 11391112#L2903-73 assume !(1 == isFloorCalling_~floorID#1); 11391109#L2907-73 assume !(2 == isFloorCalling_~floorID#1); 11391106#L2911-73 assume !(3 == isFloorCalling_~floorID#1); 11391103#L2915-73 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 11391100#isFloorCalling_returnLabel#74 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 11391097#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 11391093#L1280-2 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1; 11391087#L1302-2 assume !(0 != ~floorButtons_0~0); 11355105#L1306-2 assume !(0 != ~floorButtons_1~0); 11355101#L1310-2 assume 0 != ~floorButtons_2~0;isAnyLiftButtonPressed_~retValue_acc~14#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~14#1; 11355097#isAnyLiftButtonPressed_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 11355092#L1246-2 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 11355094#L892-8 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 11355084#isTopFloor_returnLabel#12 stopRequestedInDirection__wrappee__empty_#t~ret36#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~8#1 := stopRequestedInDirection__wrappee__empty_#t~ret36#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1; 11355085#L896-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~8#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; 11355079#stopRequestedInDirection__wrappee__empty_returnLabel#9 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1; 11355077#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#3 stopRequestedInDirection_#t~ret53#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~13#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 11355070#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret83#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret83#1;havoc timeShift_#t~ret83#1; 11355071#L1677-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~18#1; 11355064#L1451-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~18#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~18#1; 11355065#getReverseHeading_returnLabel#3 timeShift_#t~ret84#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret84#1;havoc timeShift_#t~ret84#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~13#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 11355053#L2899-104 assume !(0 == isFloorCalling_~floorID#1); 11355054#L2903-104 assume !(1 == isFloorCalling_~floorID#1); 11355045#L2907-104 assume !(2 == isFloorCalling_~floorID#1); 11355046#L2911-104 assume !(3 == isFloorCalling_~floorID#1); 11355040#L2915-104 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 11355041#isFloorCalling_returnLabel#105 isExecutiveFloorCalling_#t~ret113#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret113#1;havoc isExecutiveFloorCalling_#t~ret113#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 11355029#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret51#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret113#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret51#1;havoc stopRequestedInDirection_#t~ret51#1; 11355030#L1280-3 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1; 11354834#L1302-3 assume !(0 != ~floorButtons_0~0); 11354833#L1306-3 assume !(0 != ~floorButtons_1~0); 11343766#L1310-3 assume 0 != ~floorButtons_2~0;isAnyLiftButtonPressed_~retValue_acc~14#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~14#1; 11354830#isAnyLiftButtonPressed_returnLabel#4 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~14#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1; 11354827#L1246-3 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~8#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 11354826#L892-11 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 11354825#isTopFloor_returnLabel#16 stopRequestedInDirection__wrappee__empty_#t~ret36#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~8#1 := stopRequestedInDirection__wrappee__empty_#t~ret36#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1; 11354091#L896-11 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~8#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1; 11354092#stopRequestedInDirection__wrappee__empty_returnLabel#12 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret36#1, stopRequestedInDirection__wrappee__empty_#t~ret37#1, stopRequestedInDirection__wrappee__empty_#t~ret38#1, stopRequestedInDirection__wrappee__empty_#t~ret39#1, stopRequestedInDirection__wrappee__empty_#t~ret40#1, stopRequestedInDirection__wrappee__empty_#t~ret41#1, stopRequestedInDirection__wrappee__empty_#t~ret42#1, stopRequestedInDirection__wrappee__empty_#t~ret43#1, stopRequestedInDirection__wrappee__empty_#t~ret44#1, stopRequestedInDirection__wrappee__empty_#t~ret45#1, stopRequestedInDirection__wrappee__empty_#t~ret46#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~11#1, stopRequestedInDirection__wrappee__empty_~tmp~8#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1; 11393808#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#4 stopRequestedInDirection_#t~ret53#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret47#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret48#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret49#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret50#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~12#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~5#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~13#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~13#1; 11354076#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret85#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret51#1, stopRequestedInDirection_#t~ret52#1, stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~13#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~6#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret85#1;havoc timeShift_#t~ret85#1; 11354074#L1686-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~18#1; 11354075#L1451-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~18#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~18#1; 11313214#getReverseHeading_returnLabel#4 timeShift_#t~ret86#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~18#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 11239005#L1337-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 11239003#isTopFloor_returnLabel#17 continueInDirection_#t~ret54#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret54#1;havoc continueInDirection_#t~ret54#1; 11238999#L1341-12 assume !(0 != continueInDirection_~tmp~11#1); 11238992#L1347-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 11238989#L1353-9 havoc continueInDirection_#t~ret54#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 11238987#L1686-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~20#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~11#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~7#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 11238978#getCurrentFloorID_returnLabel#12 __utac_acc__Specification1_spec__3_#t~ret120#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~20#1 := __utac_acc__Specification1_spec__3_#t~ret120#1;havoc __utac_acc__Specification1_spec__3_#t~ret120#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~20#1; 11238970#L2342-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 11238964#$Ultimate##7403 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 11238962#L2358-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 11238958#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret122#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret122#1;havoc __utac_acc__Specification1_spec__3_#t~ret122#1; 11238949#L2362-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 11238944#L2402-1 havoc __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_#t~ret123#1, __utac_acc__Specification1_spec__3_#t~ret124#1, __utac_acc__Specification1_spec__3_#t~ret125#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~20#1, __utac_acc__Specification1_spec__3_~tmp___0~11#1, __utac_acc__Specification1_spec__3_~tmp___1~7#1, __utac_acc__Specification1_spec__3_~tmp___2~5#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 11238941#timeShift_returnLabel#2 havoc timeShift_#t~ret76#1, timeShift_#t~ret77#1, timeShift_#t~ret78#1, timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_~tmp~16#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 11238938#L2607-2 assume !false; 11031012#L2608 [2023-11-28 23:59:20,609 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:59:20,609 INFO L85 PathProgramCache]: Analyzing trace with hash -1097198330, now seen corresponding path program 1 times [2023-11-28 23:59:20,609 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:59:20,609 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1949377027] [2023-11-28 23:59:20,609 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:59:20,609 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:59:20,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:59:20,656 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-28 23:59:20,656 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:59:20,656 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1949377027] [2023-11-28 23:59:20,656 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1949377027] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:59:20,656 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:59:20,656 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-28 23:59:20,656 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [164153745] [2023-11-28 23:59:20,656 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:59:20,656 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-28 23:59:20,657 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-28 23:59:20,657 INFO L85 PathProgramCache]: Analyzing trace with hash -387451985, now seen corresponding path program 1 times [2023-11-28 23:59:20,657 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-28 23:59:20,657 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [455038020] [2023-11-28 23:59:20,657 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-28 23:59:20,657 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-28 23:59:20,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-28 23:59:20,697 INFO L134 CoverageAnalysis]: Checked inductivity of 54 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 47 trivial. 0 not checked. [2023-11-28 23:59:20,697 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-28 23:59:20,697 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [455038020] [2023-11-28 23:59:20,697 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [455038020] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-28 23:59:20,697 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-28 23:59:20,697 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-28 23:59:20,697 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1721064838] [2023-11-28 23:59:20,698 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-28 23:59:20,698 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-28 23:59:20,698 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-28 23:59:20,698 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-28 23:59:20,698 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-28 23:59:20,698 INFO L87 Difference]: Start difference. First operand 421169 states and 722058 transitions. cyclomatic complexity: 300898 Second operand has 3 states, 3 states have (on average 34.333333333333336) internal successors, (103), 2 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:59:23,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-28 23:59:23,692 INFO L93 Difference]: Finished difference Result 839577 states and 1438306 transitions. [2023-11-28 23:59:23,692 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 839577 states and 1438306 transitions. [2023-11-28 23:59:27,392 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 497312 [2023-11-28 23:59:29,885 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 839577 states to 839577 states and 1438306 transitions. [2023-11-28 23:59:29,885 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 528025 [2023-11-28 23:59:30,150 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 528025 [2023-11-28 23:59:30,150 INFO L73 IsDeterministic]: Start isDeterministic. Operand 839577 states and 1438306 transitions. [2023-11-28 23:59:30,151 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-28 23:59:30,151 INFO L218 hiAutomatonCegarLoop]: Abstraction has 839577 states and 1438306 transitions. [2023-11-28 23:59:30,547 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 839577 states and 1438306 transitions. [2023-11-28 23:59:37,428 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 839577 to 839577. [2023-11-28 23:59:38,492 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 839577 states, 839577 states have (on average 1.7131317318125676) internal successors, (1438306), 839576 states have internal predecessors, (1438306), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-28 23:59:41,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 839577 states to 839577 states and 1438306 transitions. [2023-11-28 23:59:41,428 INFO L240 hiAutomatonCegarLoop]: Abstraction has 839577 states and 1438306 transitions. [2023-11-28 23:59:41,429 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-28 23:59:41,429 INFO L428 stractBuchiCegarLoop]: Abstraction has 839577 states and 1438306 transitions. [2023-11-28 23:59:41,429 INFO L335 stractBuchiCegarLoop]: ======== Iteration 41 ============ [2023-11-28 23:59:41,429 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 839577 states and 1438306 transitions.