./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec2_product21.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 3289d67d Calling Ultimate with: /root/.sdkman/candidates/java/11.0.12-open/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec2_product21.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash b02d53de4cc8dbaebc187e8fa236234211af4eca5416c7869304d04f0d61a0bd --- Real Ultimate output --- This is Ultimate 0.2.5-tmp.fs.icfgbuilder-eval-3289d67-m [2024-11-17 08:38:15,325 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-17 08:38:15,397 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-11-17 08:38:15,403 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-17 08:38:15,404 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-17 08:38:15,404 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.Remove goto edges from RCFG [2024-11-17 08:38:15,428 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-17 08:38:15,428 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-17 08:38:15,429 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-17 08:38:15,433 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-17 08:38:15,433 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-17 08:38:15,433 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-17 08:38:15,434 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-17 08:38:15,435 INFO L153 SettingsManager]: * Use SBE=true [2024-11-17 08:38:15,435 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-11-17 08:38:15,436 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-11-17 08:38:15,436 INFO L153 SettingsManager]: * Use old map elimination=false [2024-11-17 08:38:15,436 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-11-17 08:38:15,436 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-11-17 08:38:15,437 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-11-17 08:38:15,437 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-17 08:38:15,438 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-11-17 08:38:15,438 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-17 08:38:15,438 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-17 08:38:15,438 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-17 08:38:15,439 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-17 08:38:15,439 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-11-17 08:38:15,439 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-11-17 08:38:15,439 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-11-17 08:38:15,440 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-17 08:38:15,440 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-11-17 08:38:15,441 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-17 08:38:15,441 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-17 08:38:15,441 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-11-17 08:38:15,441 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-17 08:38:15,441 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-11-17 08:38:15,442 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-17 08:38:15,442 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-17 08:38:15,442 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-17 08:38:15,443 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-11-17 08:38:15,443 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> b02d53de4cc8dbaebc187e8fa236234211af4eca5416c7869304d04f0d61a0bd [2024-11-17 08:38:15,697 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-17 08:38:15,722 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-17 08:38:15,726 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-17 08:38:15,727 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-17 08:38:15,727 INFO L274 PluginConnector]: CDTParser initialized [2024-11-17 08:38:15,729 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec2_product21.cil.c [2024-11-17 08:38:17,194 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-17 08:38:17,489 INFO L384 CDTParser]: Found 1 translation units. [2024-11-17 08:38:17,490 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec2_product21.cil.c [2024-11-17 08:38:17,527 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f198dcccc/2748cc8ff11b4ec68143b0663d1c4cf1/FLAGcbca2b264 [2024-11-17 08:38:17,545 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f198dcccc/2748cc8ff11b4ec68143b0663d1c4cf1 [2024-11-17 08:38:17,548 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-17 08:38:17,552 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-17 08:38:17,554 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-17 08:38:17,554 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-17 08:38:17,560 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-17 08:38:17,561 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 08:38:17" (1/1) ... [2024-11-17 08:38:17,561 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@725b5b66 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:17, skipping insertion in model container [2024-11-17 08:38:17,562 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 08:38:17" (1/1) ... [2024-11-17 08:38:17,629 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-17 08:38:18,148 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-17 08:38:18,173 INFO L200 MainTranslator]: Completed pre-run [2024-11-17 08:38:18,183 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [48] [2024-11-17 08:38:18,185 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [86] [2024-11-17 08:38:18,186 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [452] [2024-11-17 08:38:18,186 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [1120] [2024-11-17 08:38:18,186 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [1220] [2024-11-17 08:38:18,186 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [1574] [2024-11-17 08:38:18,186 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [1586] [2024-11-17 08:38:18,187 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [1706] [2024-11-17 08:38:18,187 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1890] [2024-11-17 08:38:18,187 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [1899] [2024-11-17 08:38:18,281 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-17 08:38:18,315 INFO L204 MainTranslator]: Completed translation [2024-11-17 08:38:18,316 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:18 WrapperNode [2024-11-17 08:38:18,316 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-17 08:38:18,318 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-17 08:38:18,318 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-17 08:38:18,318 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-17 08:38:18,324 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:18" (1/1) ... [2024-11-17 08:38:18,363 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:18" (1/1) ... [2024-11-17 08:38:18,515 INFO L138 Inliner]: procedures = 92, calls = 340, calls flagged for inlining = 193, calls inlined = 391, statements flattened = 13082 [2024-11-17 08:38:18,516 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-17 08:38:18,517 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-17 08:38:18,517 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-17 08:38:18,517 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-17 08:38:18,528 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:18" (1/1) ... [2024-11-17 08:38:18,529 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:18" (1/1) ... [2024-11-17 08:38:18,555 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:18" (1/1) ... [2024-11-17 08:38:18,706 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-11-17 08:38:18,707 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:18" (1/1) ... [2024-11-17 08:38:18,707 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:18" (1/1) ... [2024-11-17 08:38:18,801 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:18" (1/1) ... [2024-11-17 08:38:18,815 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:18" (1/1) ... [2024-11-17 08:38:18,832 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:18" (1/1) ... [2024-11-17 08:38:18,848 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:18" (1/1) ... [2024-11-17 08:38:18,883 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-17 08:38:18,884 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2024-11-17 08:38:18,884 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2024-11-17 08:38:18,884 INFO L274 PluginConnector]: IcfgBuilder initialized [2024-11-17 08:38:18,885 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:18" (1/1) ... [2024-11-17 08:38:18,891 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-17 08:38:18,904 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-17 08:38:18,923 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-17 08:38:18,930 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-11-17 08:38:18,970 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-17 08:38:18,970 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-17 08:38:18,972 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-11-17 08:38:18,972 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-11-17 08:38:18,972 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-11-17 08:38:18,972 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-11-17 08:38:18,973 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-11-17 08:38:18,973 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-11-17 08:38:18,973 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-11-17 08:38:18,973 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-11-17 08:38:18,973 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-11-17 08:38:18,973 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-11-17 08:38:18,973 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-11-17 08:38:18,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-11-17 08:38:18,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-11-17 08:38:18,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-11-17 08:38:18,975 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-11-17 08:38:18,975 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-11-17 08:38:18,975 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-11-17 08:38:18,975 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-11-17 08:38:18,975 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-11-17 08:38:18,975 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-17 08:38:18,975 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-17 08:38:19,184 INFO L256 CfgBuilder]: Building ICFG [2024-11-17 08:38:19,186 INFO L286 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-17 08:38:25,203 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1571-1: main_#res#1 := main_~retValue_acc~9#1; [2024-11-17 08:38:25,204 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2128-1: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; [2024-11-17 08:38:25,204 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2128-3: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; [2024-11-17 08:38:25,204 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2128-5: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; [2024-11-17 08:38:25,204 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2128-7: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; [2024-11-17 08:38:25,204 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2665-1: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; [2024-11-17 08:38:25,205 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2665-3: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; [2024-11-17 08:38:25,205 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2665-5: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; [2024-11-17 08:38:25,205 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2665-7: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; [2024-11-17 08:38:25,205 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2665-9: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; [2024-11-17 08:38:25,205 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2665-11: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; [2024-11-17 08:38:25,205 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2665-13: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; [2024-11-17 08:38:25,205 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2665-15: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; [2024-11-17 08:38:25,205 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2137-1: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; [2024-11-17 08:38:25,205 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2665-17: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; [2024-11-17 08:38:25,206 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2137-3: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; [2024-11-17 08:38:25,206 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2665-19: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; [2024-11-17 08:38:25,206 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2137-5: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; [2024-11-17 08:38:25,206 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2665-21: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; [2024-11-17 08:38:25,206 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2137-7: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; [2024-11-17 08:38:25,206 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2665-23: stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; [2024-11-17 08:38:25,206 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2137-9: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; [2024-11-17 08:38:25,206 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2137-11: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; [2024-11-17 08:38:25,206 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2137-13: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; [2024-11-17 08:38:25,207 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2137-15: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; [2024-11-17 08:38:25,207 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2137-17: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; [2024-11-17 08:38:25,207 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2137-19: areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; [2024-11-17 08:38:25,207 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-1: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,207 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-3: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,207 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-5: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,208 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-7: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,208 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-9: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,208 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-11: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,208 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-13: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,208 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-15: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,208 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-17: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,208 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-19: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,208 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-21: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,209 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-23: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,209 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-25: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,209 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-27: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,209 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-29: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,209 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-31: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,209 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-33: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,210 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-35: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,210 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-37: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,210 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-39: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,210 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-41: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,210 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-43: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,210 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-45: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,210 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1625-47: getWeight_#res#1 := getWeight_~retValue_acc~10#1; [2024-11-17 08:38:25,210 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-1: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,211 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-3: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,211 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-5: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,211 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-7: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,212 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-9: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,212 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-11: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,212 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-13: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,212 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-15: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,212 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-17: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,212 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-19: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,212 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-21: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,212 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-23: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,212 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-25: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,212 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-27: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,212 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-29: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,213 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-31: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,213 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-33: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,213 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-35: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,213 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-37: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,213 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-39: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,213 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-41: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,213 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-43: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,214 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-45: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,214 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-47: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,214 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-49: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,214 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-51: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,214 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-53: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,215 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-55: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,215 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-57: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,215 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-59: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,215 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-61: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,215 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-63: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,215 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-65: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,215 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-67: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,216 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-69: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,216 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-71: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,216 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-73: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,216 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-75: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,217 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-77: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,217 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-79: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,217 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-81: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,217 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-83: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,217 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-85: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,217 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-87: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,218 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-89: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,218 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-91: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,218 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-93: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,218 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-95: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,218 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-97: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,218 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-99: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,218 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-101: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,218 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-103: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,218 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-105: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,219 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-107: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,219 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-109: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,219 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-111: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,219 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-113: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,219 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-115: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,219 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-117: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,220 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-119: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,220 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-121: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,220 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-123: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,220 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-125: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,220 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-127: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,221 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-129: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,221 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-131: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,221 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-133: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,221 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-135: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,221 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-137: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,221 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-139: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,221 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-141: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,221 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-143: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,221 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-145: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,221 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-147: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,221 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-149: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,221 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-151: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,221 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-153: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,222 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-155: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,222 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-157: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,222 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-159: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,222 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-161: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,222 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-163: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,222 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-165: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,222 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-167: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,222 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-169: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,222 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-171: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,222 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-173: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,222 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-175: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,222 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-177: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,222 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-179: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,223 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-181: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,223 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-183: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,223 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-185: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,223 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-187: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,223 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-189: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,223 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-191: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,223 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-193: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,225 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-195: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,225 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-197: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,225 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-199: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,225 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-201: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,225 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-203: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,225 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-205: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,225 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-207: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,226 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-209: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,226 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-211: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,226 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-213: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,226 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-215: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,226 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-217: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,226 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-219: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,226 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-221: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,226 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-223: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,227 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-225: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,227 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-227: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,227 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-229: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,227 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-231: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,227 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-233: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,227 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-235: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,227 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-237: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,228 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-239: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,228 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-241: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,228 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-243: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,228 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-245: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,228 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-247: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,228 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-249: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,228 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-251: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,228 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L570-253: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:38:25,229 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2171-1: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:38:25,229 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2171-3: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:38:25,229 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2171-5: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:38:25,229 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2171-7: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:38:25,229 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-1: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,229 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-3: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,229 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-5: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,229 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-7: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,230 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-9: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,230 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-11: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,230 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-13: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,230 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-15: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,230 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-17: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,230 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-19: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,230 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-21: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,230 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-23: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,230 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-25: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,230 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-27: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,230 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-29: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,230 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-31: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,230 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-33: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,231 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1117-35: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:38:25,231 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2704-1: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; [2024-11-17 08:38:25,232 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2704-3: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; [2024-11-17 08:38:25,232 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2704-5: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; [2024-11-17 08:38:25,233 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2704-7: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; [2024-11-17 08:38:25,233 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1664-1: getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; [2024-11-17 08:38:25,233 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L83-1: valid_product_#res#1 := valid_product_~retValue_acc~1#1; [2024-11-17 08:38:25,233 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2738-1: isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; [2024-11-17 08:38:25,233 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2738-3: isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; [2024-11-17 08:38:25,233 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2738-5: isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; [2024-11-17 08:38:25,233 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2738-7: isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; [2024-11-17 08:38:25,234 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-1: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,234 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-3: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,234 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-5: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,234 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-7: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,234 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-9: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,234 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-11: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,234 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-13: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,234 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-15: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,234 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-17: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,235 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-19: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,235 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-21: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,235 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-23: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,235 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-25: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,235 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-27: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,235 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-29: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,235 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-31: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,235 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-33: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,235 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-35: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,236 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-37: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,236 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-39: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,236 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-41: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,236 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-43: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,236 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-45: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,236 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1703-47: getDestination_#res#1 := getDestination_~retValue_acc~12#1; [2024-11-17 08:38:25,236 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2794-1: stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1; [2024-11-17 08:38:25,236 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2794-3: stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1; [2024-11-17 08:38:25,236 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2822-1: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; [2024-11-17 08:38:25,236 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2822-3: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; [2024-11-17 08:38:25,237 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2300-1: anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; [2024-11-17 08:38:25,237 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2836-1: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; [2024-11-17 08:38:25,237 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2836-3: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; [2024-11-17 08:38:25,237 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2836-5: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; [2024-11-17 08:38:25,237 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2836-7: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; [2024-11-17 08:38:25,237 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2313-1: isIdle_#res#1 := isIdle_~retValue_acc~20#1; [2024-11-17 08:38:25,237 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L806-1: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:38:25,237 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L806-3: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:38:25,237 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L806-5: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:38:25,237 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L806-7: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:38:25,238 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L806-9: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:38:25,238 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L806-11: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:38:25,238 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L806-13: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:38:25,238 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L806-15: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:38:25,238 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L806-17: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:38:25,238 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L806-19: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:38:25,240 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L806-21: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:38:25,241 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L806-23: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:38:25,244 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1971-1: isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; [2024-11-17 08:38:26,392 INFO L? ?]: Removed 5787 outVars from TransFormulas that were not future-live. [2024-11-17 08:38:26,393 INFO L307 CfgBuilder]: Performing block encoding [2024-11-17 08:38:26,469 INFO L331 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-17 08:38:26,469 INFO L336 CfgBuilder]: Removed 0 assume(true) statements. [2024-11-17 08:38:26,470 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 17.11 08:38:26 BoogieIcfgContainer [2024-11-17 08:38:26,470 INFO L131 PluginConnector]: ------------------------ END IcfgBuilder---------------------------- [2024-11-17 08:38:26,471 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-11-17 08:38:26,471 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-11-17 08:38:26,475 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-11-17 08:38:26,476 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-17 08:38:26,476 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 17.11 08:38:17" (1/3) ... [2024-11-17 08:38:26,477 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@7b5ab6a9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 17.11 08:38:26, skipping insertion in model container [2024-11-17 08:38:26,477 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-17 08:38:26,477 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:18" (2/3) ... [2024-11-17 08:38:26,478 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@7b5ab6a9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 17.11 08:38:26, skipping insertion in model container [2024-11-17 08:38:26,478 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-17 08:38:26,478 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 17.11 08:38:26" (3/3) ... [2024-11-17 08:38:26,480 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec2_product21.cil.c [2024-11-17 08:38:26,590 INFO L300 stractBuchiCegarLoop]: Interprodecural is true [2024-11-17 08:38:26,590 INFO L301 stractBuchiCegarLoop]: Hoare is None [2024-11-17 08:38:26,590 INFO L302 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-11-17 08:38:26,590 INFO L303 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-11-17 08:38:26,590 INFO L304 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-11-17 08:38:26,590 INFO L305 stractBuchiCegarLoop]: Difference is false [2024-11-17 08:38:26,590 INFO L306 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-11-17 08:38:26,591 INFO L310 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-11-17 08:38:26,607 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3755 states, 3754 states have (on average 1.822056473095365) internal successors, (6840), 3754 states have internal predecessors, (6840), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:26,714 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1858 [2024-11-17 08:38:26,715 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:38:26,715 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:38:26,733 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:26,734 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:26,734 INFO L332 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-11-17 08:38:26,744 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 3755 states, 3754 states have (on average 1.822056473095365) internal successors, (6840), 3754 states have internal predecessors, (6840), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:26,780 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1858 [2024-11-17 08:38:26,780 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:38:26,780 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:38:26,784 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:26,785 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:26,791 INFO L745 eck$LassoCheckResult]: Stem: 2355#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2842#ULTIMATE.init_returnLabel#1true assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 3227#L74true assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3025#L67true assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 3247#L82true assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1162#L1561true assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 2095#L1533true assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 291#L1724true assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1927#L1632true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1497#L1657true assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1934#L813true assume 0 == initPersonOnFloor_~floor#1; 789#L814true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2886#L955true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3704#L605true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2082#L626true assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1705#L957true assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 3391#L1337true assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 2536#L2808-1true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2675#L2127-3true assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 2146#L2144-2true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 591#L2165-2true assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 2263#L2819-1true assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 2329#L2955-1true assume !(0 != timeShift_~tmp___9~2#1); 404#L3046-1true assume !(1 == ~doorState~0); 2870#L3052-1true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 779#L2711-3true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 2204#L2732-3true assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 2929#L2684-3true assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 2647#L2331-11true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1628#L2500-11true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1528#L2502-11true assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 3212#L2702-3true assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 1112#L3054-1true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 2787#L2746-3true assume !(1 == ~currentHeading~0); 1836#L2756-3true assume !(0 == ~currentFloorID~0); 2127#L2762-3true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2450#L2767-3true assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 2602#L3076-1true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2778#L2127-2true assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 3108#L1769-1true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 3294#L1770-1true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 3444#L2136-5true assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 2009#L1774-1true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 839#L1849-1true assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1010#L3078-1true assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1950#L1365true [2024-11-17 08:38:26,796 INFO L747 eck$LassoCheckResult]: Loop: 1950#L1365true assume true; 114#L1365-1true assume !false; 2365#cleanup_while_5_continue#1true assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 748#L1369true assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 2192#L1970true assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 2534#L1373true assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 359#L542-65true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 3252#L560-65true assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 900#L2235true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 3022#L2285true assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1514#L2312true assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 2207#L1385true assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 2954#L2808true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3751#L2127-1true assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 2240#L2144true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1016#L2165true assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 344#L2819true assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 2668#L2955true assume !(0 != timeShift_~tmp___9~2#1); 1566#L3046true assume 1 == ~doorState~0;~doorState~0 := 0; 190#L3052true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1760#L2711-1true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 2912#L2732-1true assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 3350#L2684-1true assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 2786#L2331-5true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 715#L2500-5true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1018#L2502-5true assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 929#L2702-1true assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 719#L3054true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 3609#L2746true assume !(1 == ~currentHeading~0); 2909#L2756true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3454#L2762true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3458#L2767true assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 2472#L3076true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 706#L2127true assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 569#L1769true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1460#L1770true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 3459#L2136true assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 3205#L1774true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1709#L1849true assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 126#L3078true assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1950#L1365true [2024-11-17 08:38:26,809 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:26,810 INFO L85 PathProgramCache]: Analyzing trace with hash 1013221073, now seen corresponding path program 1 times [2024-11-17 08:38:26,819 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:26,819 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [669345757] [2024-11-17 08:38:26,819 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:26,820 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:26,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:27,262 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:27,262 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:27,263 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [669345757] [2024-11-17 08:38:27,263 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [669345757] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:27,263 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:27,264 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:38:27,265 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [964026456] [2024-11-17 08:38:27,267 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:27,271 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:38:27,272 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:27,272 INFO L85 PathProgramCache]: Analyzing trace with hash 1386641050, now seen corresponding path program 1 times [2024-11-17 08:38:27,272 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:27,273 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1290773551] [2024-11-17 08:38:27,273 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:27,273 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:27,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:27,415 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:27,415 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:27,415 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1290773551] [2024-11-17 08:38:27,415 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1290773551] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:27,415 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:27,415 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:38:27,416 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [3764721] [2024-11-17 08:38:27,416 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:27,417 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:38:27,417 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:38:27,449 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-17 08:38:27,451 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-17 08:38:27,463 INFO L87 Difference]: Start difference. First operand has 3755 states, 3754 states have (on average 1.822056473095365) internal successors, (6840), 3754 states have internal predecessors, (6840), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:28,219 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:38:28,220 INFO L93 Difference]: Finished difference Result 3763 states and 6841 transitions. [2024-11-17 08:38:28,221 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 3763 states and 6841 transitions. [2024-11-17 08:38:28,249 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1867 [2024-11-17 08:38:28,281 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 3763 states to 3744 states and 6819 transitions. [2024-11-17 08:38:28,282 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 3744 [2024-11-17 08:38:28,288 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 3744 [2024-11-17 08:38:28,288 INFO L73 IsDeterministic]: Start isDeterministic. Operand 3744 states and 6819 transitions. [2024-11-17 08:38:28,302 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:38:28,303 INFO L218 hiAutomatonCegarLoop]: Abstraction has 3744 states and 6819 transitions. [2024-11-17 08:38:28,327 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3744 states and 6819 transitions. [2024-11-17 08:38:28,417 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3744 to 3736. [2024-11-17 08:38:28,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3736 states, 3736 states have (on average 1.8230728051391862) internal successors, (6811), 3735 states have internal predecessors, (6811), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:28,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3736 states to 3736 states and 6811 transitions. [2024-11-17 08:38:28,443 INFO L240 hiAutomatonCegarLoop]: Abstraction has 3736 states and 6811 transitions. [2024-11-17 08:38:28,445 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-17 08:38:28,448 INFO L425 stractBuchiCegarLoop]: Abstraction has 3736 states and 6811 transitions. [2024-11-17 08:38:28,448 INFO L332 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-11-17 08:38:28,448 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 3736 states and 6811 transitions. [2024-11-17 08:38:28,468 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1863 [2024-11-17 08:38:28,469 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:38:28,469 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:38:28,472 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:28,472 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:28,473 INFO L745 eck$LassoCheckResult]: Stem: 10832#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 10833#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 11091#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 11163#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 11164#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 9682#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 9683#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 8209#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 8210#L1632 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 8535#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 10086#L813 assume 0 == initPersonOnFloor_~floor#1; 9137#L814 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 7990#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 11111#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 7913#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 10301#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 10302#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 10952#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 10953#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 10688#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 8797#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 8798#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 10772#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 8442#L3046-1 assume !(1 == ~doorState~0); 8443#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 9120#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 9122#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 10728#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 11013#L2331-11 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 10224#L2500-11 assume !(0 == ~currentFloorID~0); 10225#L2506-11 assume ~currentFloorID~0 > 0; 10891#L2507-11 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 10892#L542-121 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 7873#L560-121 assume true;stopRequestedInDirection__wrappee__weight_#t~ret68#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret68#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret68#1; 10740#L2511-11 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 7756#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 11265#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 11264#L3054-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 11067#L2746-3 assume !(1 == ~currentHeading~0); 10432#L2756-3 assume !(0 == ~currentFloorID~0); 9998#L2762-3 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 10674#L2767-3 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 7599#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 10993#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 11061#L1769-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 11181#L1770-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 11219#L2136-5 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 10578#L1774-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 8706#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 9219#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 7853#L1365 [2024-11-17 08:38:28,473 INFO L747 eck$LassoCheckResult]: Loop: 7853#L1365 assume true; 7820#L1365-1 assume !false; 7821#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 9066#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 9067#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 10717#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 8356#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 8358#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 9312#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 7653#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 10098#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 10099#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 10731#L2808 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 11135#L2127-1 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 10754#L2144 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 8609#L2165 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 8320#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 8321#L2955 assume !(0 != timeShift_~tmp___9~2#1); 10156#L3046 assume 1 == ~doorState~0;~doorState~0 := 0; 7992#L3052 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 7993#L2711-1 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 8175#L2732-1 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 11120#L2684-1 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 11066#L2331-5 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 9011#L2500-5 assume !(0 == ~currentFloorID~0); 9013#L2506-5 assume !(~currentFloorID~0 > 0); 7936#L2518-5 assume true; 10653#L2522-5 assume ~currentFloorID~0 > 0; 11090#L2523-5 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 9715#L2524-5 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 7899#L2502-5 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 11263#L2702-1 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 11262#L3054 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 11260#L2746 assume !(1 == ~currentHeading~0); 11119#L2756 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 10673#L2762 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 11236#L2767 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 7871#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 8998#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 8761#L1769 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 8762#L1770 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 10046#L2136 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 11206#L1774 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 8160#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 7852#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 7853#L1365 [2024-11-17 08:38:28,475 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:28,476 INFO L85 PathProgramCache]: Analyzing trace with hash -1282079694, now seen corresponding path program 1 times [2024-11-17 08:38:28,476 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:28,476 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1102263892] [2024-11-17 08:38:28,476 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:28,476 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:28,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:28,589 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:28,589 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:28,590 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1102263892] [2024-11-17 08:38:28,590 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1102263892] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:28,590 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:28,590 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:38:28,594 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [177833973] [2024-11-17 08:38:28,594 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:28,594 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:38:28,595 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:28,595 INFO L85 PathProgramCache]: Analyzing trace with hash 1134132924, now seen corresponding path program 1 times [2024-11-17 08:38:28,595 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:28,595 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [833215299] [2024-11-17 08:38:28,595 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:28,596 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:28,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:28,684 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:28,684 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:28,684 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [833215299] [2024-11-17 08:38:28,685 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [833215299] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:28,685 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:28,685 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:38:28,685 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1210038319] [2024-11-17 08:38:28,685 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:28,685 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:38:28,686 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:38:28,686 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-17 08:38:28,686 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-17 08:38:28,686 INFO L87 Difference]: Start difference. First operand 3736 states and 6811 transitions. cyclomatic complexity: 3076 Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:29,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:38:29,919 INFO L93 Difference]: Finished difference Result 4660 states and 8356 transitions. [2024-11-17 08:38:29,919 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4660 states and 8356 transitions. [2024-11-17 08:38:29,952 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3241 [2024-11-17 08:38:29,979 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4660 states to 4660 states and 8356 transitions. [2024-11-17 08:38:29,980 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4660 [2024-11-17 08:38:29,984 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4660 [2024-11-17 08:38:29,984 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4660 states and 8356 transitions. [2024-11-17 08:38:29,991 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:38:29,992 INFO L218 hiAutomatonCegarLoop]: Abstraction has 4660 states and 8356 transitions. [2024-11-17 08:38:29,997 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4660 states and 8356 transitions. [2024-11-17 08:38:30,067 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4660 to 4651. [2024-11-17 08:38:30,078 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4651 states, 4651 states have (on average 1.7933777682218877) internal successors, (8341), 4650 states have internal predecessors, (8341), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:30,092 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4651 states to 4651 states and 8341 transitions. [2024-11-17 08:38:30,093 INFO L240 hiAutomatonCegarLoop]: Abstraction has 4651 states and 8341 transitions. [2024-11-17 08:38:30,093 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-17 08:38:30,096 INFO L425 stractBuchiCegarLoop]: Abstraction has 4651 states and 8341 transitions. [2024-11-17 08:38:30,096 INFO L332 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-11-17 08:38:30,096 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4651 states and 8341 transitions. [2024-11-17 08:38:30,120 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3232 [2024-11-17 08:38:30,120 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:38:30,120 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:38:30,125 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:30,126 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:30,126 INFO L745 eck$LassoCheckResult]: Stem: 18828#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 18829#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 19072#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 19141#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 19142#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 17804#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 17805#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 16516#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 16517#L1632 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 16797#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 18169#L813 assume 0 == initPersonOnFloor_~floor#1; 17331#L814 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 16317#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 19091#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 16254#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 18361#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 18362#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 18940#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 18941#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 18704#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 17027#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 17028#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 18776#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 16714#L3046-1 assume !(1 == ~doorState~0); 16715#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 17318#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 17320#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 18740#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 19002#L2331-11 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 18733#L1116-17 assume true;stopRequestedInDirection__wrappee__weight_#t~ret62#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~19#1 := stopRequestedInDirection__wrappee__weight_#t~ret62#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1; 18734#L2335-11 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~19#1); 18627#L2341-11 assume !(~currentFloorID~0 < 0); 18628#L2353-11 assume true; 18634#L2357-11 assume !(~currentFloorID~0 < 0); 18959#L2366-11 assume true; 18960#L2370-11 assume ~currentFloorID~0 < 1; 19183#L2371-11 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 17117#L542-117 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 17119#L560-117 assume true;stopRequestedInDirection__wrappee__weight_#t~ret64#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret64#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret64#1; 18885#L2375-11 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 16130#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 19269#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 19268#L3054-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 19048#L2746-3 assume !(1 == ~currentHeading~0); 18480#L2756-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 18088#L2762-3 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 18690#L2767-3 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 16000#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 19366#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 19365#L1769-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 19364#L1770-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 19363#L2136-5 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 19349#L1774-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 19337#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 19335#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 19333#L1365 [2024-11-17 08:38:30,126 INFO L747 eck$LassoCheckResult]: Loop: 19333#L1365 assume true; 19332#L1365-1 assume !false; 19331#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 19330#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 19329#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 19328#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 19324#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 19318#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 19312#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 19302#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 19301#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 19300#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 19298#L2808 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 19297#L542-60 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 19292#L560-60 assume true;stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1; 19289#L2779 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1; 19288#L2791 assume true;stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 19287#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 19285#L2955 assume !(0 != timeShift_~tmp___9~2#1); 19284#L3046 assume 1 == ~doorState~0;~doorState~0 := 0; 19283#L3052 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 19281#L2711-1 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 19277#L2732-1 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 19275#L2684-1 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 19276#L2331-5 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 20188#L2500-5 assume !(0 == ~currentFloorID~0); 18124#L2506-5 assume !(~currentFloorID~0 > 0); 16272#L2518-5 assume true; 18669#L2522-5 assume ~currentFloorID~0 > 0; 19071#L2523-5 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 17837#L2524-5 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 16271#L2502-5 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 17518#L2702-1 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 17519#L3054 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 20585#L2746 assume !(1 == ~currentHeading~0); 20584#L2756 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 18689#L2762 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 19212#L2767 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 16225#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 19391#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 19390#L1769 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 19388#L1770 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 19389#L2136 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 19372#L1774 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 19367#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 19334#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 19333#L1365 [2024-11-17 08:38:30,127 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:30,131 INFO L85 PathProgramCache]: Analyzing trace with hash -685645078, now seen corresponding path program 1 times [2024-11-17 08:38:30,131 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:30,131 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [241181848] [2024-11-17 08:38:30,132 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:30,132 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:30,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:30,217 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:30,218 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:30,218 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [241181848] [2024-11-17 08:38:30,218 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [241181848] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:30,218 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:30,218 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:38:30,219 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1001022667] [2024-11-17 08:38:30,219 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:30,219 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:38:30,220 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:30,220 INFO L85 PathProgramCache]: Analyzing trace with hash -2090915176, now seen corresponding path program 1 times [2024-11-17 08:38:30,220 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:30,220 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1128746156] [2024-11-17 08:38:30,220 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:30,220 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:30,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:30,301 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:30,301 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:30,302 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1128746156] [2024-11-17 08:38:30,302 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1128746156] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:30,302 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:30,302 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:38:30,302 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [604538256] [2024-11-17 08:38:30,302 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:30,303 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:38:30,303 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:38:30,303 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-17 08:38:30,303 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-17 08:38:30,304 INFO L87 Difference]: Start difference. First operand 4651 states and 8341 transitions. cyclomatic complexity: 3691 Second operand has 4 states, 4 states have (on average 11.5) internal successors, (46), 4 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:32,209 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:38:32,210 INFO L93 Difference]: Finished difference Result 7386 states and 13193 transitions. [2024-11-17 08:38:32,210 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 7386 states and 13193 transitions. [2024-11-17 08:38:32,264 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5971 [2024-11-17 08:38:32,314 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 7386 states to 7386 states and 13193 transitions. [2024-11-17 08:38:32,314 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 7386 [2024-11-17 08:38:32,323 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 7386 [2024-11-17 08:38:32,324 INFO L73 IsDeterministic]: Start isDeterministic. Operand 7386 states and 13193 transitions. [2024-11-17 08:38:32,338 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:38:32,339 INFO L218 hiAutomatonCegarLoop]: Abstraction has 7386 states and 13193 transitions. [2024-11-17 08:38:32,347 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7386 states and 13193 transitions. [2024-11-17 08:38:32,449 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7386 to 6535. [2024-11-17 08:38:32,460 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6535 states, 6535 states have (on average 1.8111706197398623) internal successors, (11836), 6534 states have internal predecessors, (11836), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:32,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6535 states to 6535 states and 11836 transitions. [2024-11-17 08:38:32,482 INFO L240 hiAutomatonCegarLoop]: Abstraction has 6535 states and 11836 transitions. [2024-11-17 08:38:32,483 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-17 08:38:32,484 INFO L425 stractBuchiCegarLoop]: Abstraction has 6535 states and 11836 transitions. [2024-11-17 08:38:32,484 INFO L332 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-11-17 08:38:32,484 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6535 states and 11836 transitions. [2024-11-17 08:38:32,509 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5120 [2024-11-17 08:38:32,510 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:38:32,510 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:38:32,515 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:32,515 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:32,516 INFO L745 eck$LassoCheckResult]: Stem: 30878#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 30879#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 31123#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 31192#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 31193#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 29845#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 29846#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 28561#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 28562#L1632 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 28840#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 30210#L813 assume 0 == initPersonOnFloor_~floor#1; 29372#L814 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 28359#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 31141#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 28297#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 30404#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 30405#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 30987#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 30988#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 30750#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 29069#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 29070#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 30822#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 28757#L3046-1 assume !(1 == ~doorState~0); 28758#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 29360#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 29362#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 30784#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 31049#L2331-11 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 30777#L1116-17 assume true;stopRequestedInDirection__wrappee__weight_#t~ret62#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~19#1 := stopRequestedInDirection__wrappee__weight_#t~ret62#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1; 30778#L2335-11 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~19#1); 30673#L2341-11 assume !(~currentFloorID~0 < 0); 30674#L2353-11 assume true; 30680#L2357-11 assume !(~currentFloorID~0 < 0); 31004#L2366-11 assume true; 31005#L2370-11 assume ~currentFloorID~0 < 1; 31234#L2371-11 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 29159#L542-117 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 29161#L560-117 assume true;stopRequestedInDirection__wrappee__weight_#t~ret64#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret64#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret64#1; 30933#L2375-11 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 28174#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 31335#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 31334#L3054-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 31099#L2746-3 assume !(1 == ~currentHeading~0); 30527#L2756-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 30129#L2762-3 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 30737#L2767-3 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 28045#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 31092#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 31093#L1769-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 31205#L1770-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 31244#L2136-5 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 30648#L1774-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 28986#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 32373#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 32370#L1365 [2024-11-17 08:38:32,518 INFO L747 eck$LassoCheckResult]: Loop: 32370#L1365 assume true; 32367#L1365-1 assume !false; 32365#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 32364#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 32363#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 32362#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 32354#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 32339#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 32331#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 32321#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 32320#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 32319#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 32313#L2808 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 32311#L2127-1 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 31361#L2144 assume !(0 == buttonForFloorIsPressed_~floorID#1); 31355#L2148 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 31352#L2165 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 31351#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 31349#L2955 assume !(0 != timeShift_~tmp___9~2#1); 31348#L3046 assume 1 == ~doorState~0;~doorState~0 := 0; 31347#L3052 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 31345#L2711-1 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 31341#L2732-1 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 31327#L2684-1 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 31328#L2331-5 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 31337#L2500-5 assume !(0 == ~currentFloorID~0); 30165#L2506-5 assume !(~currentFloorID~0 > 0); 28314#L2518-5 assume true; 30716#L2522-5 assume ~currentFloorID~0 > 0; 31122#L2523-5 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 29877#L2524-5 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 28313#L2502-5 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 32389#L2702-1 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 32390#L3054 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 34516#L2746 assume !(1 == ~currentHeading~0); 34175#L2756 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 30736#L2762 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 31265#L2767 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 28268#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 32464#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 32462#L1769 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 32457#L1770 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 32455#L2136 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 32381#L1774 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 32375#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 32372#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 32370#L1365 [2024-11-17 08:38:32,518 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:32,519 INFO L85 PathProgramCache]: Analyzing trace with hash -685645078, now seen corresponding path program 2 times [2024-11-17 08:38:32,519 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:32,519 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1951378542] [2024-11-17 08:38:32,519 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:32,519 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:32,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:32,610 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:32,611 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:32,611 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1951378542] [2024-11-17 08:38:32,611 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1951378542] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:32,611 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:32,611 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:38:32,612 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [903891171] [2024-11-17 08:38:32,612 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:32,612 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:38:32,612 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:32,613 INFO L85 PathProgramCache]: Analyzing trace with hash -657556375, now seen corresponding path program 1 times [2024-11-17 08:38:32,613 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:32,613 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [54692945] [2024-11-17 08:38:32,613 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:32,613 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:32,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:32,742 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:32,742 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:32,743 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [54692945] [2024-11-17 08:38:32,745 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [54692945] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:32,745 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:32,745 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:38:32,746 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [16756784] [2024-11-17 08:38:32,746 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:32,746 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:38:32,746 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:38:32,746 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-17 08:38:32,747 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2024-11-17 08:38:32,747 INFO L87 Difference]: Start difference. First operand 6535 states and 11836 transitions. cyclomatic complexity: 5302 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:33,660 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:38:33,661 INFO L93 Difference]: Finished difference Result 10961 states and 19788 transitions. [2024-11-17 08:38:33,661 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10961 states and 19788 transitions. [2024-11-17 08:38:33,719 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9508 [2024-11-17 08:38:33,781 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10961 states to 10923 states and 19750 transitions. [2024-11-17 08:38:33,782 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10923 [2024-11-17 08:38:33,796 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10923 [2024-11-17 08:38:33,796 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10923 states and 19750 transitions. [2024-11-17 08:38:33,814 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:38:33,815 INFO L218 hiAutomatonCegarLoop]: Abstraction has 10923 states and 19750 transitions. [2024-11-17 08:38:33,827 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10923 states and 19750 transitions. [2024-11-17 08:38:33,968 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10923 to 10914. [2024-11-17 08:38:33,991 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10914 states, 10914 states have (on average 1.8082279640828294) internal successors, (19735), 10913 states have internal predecessors, (19735), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:34,138 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10914 states to 10914 states and 19735 transitions. [2024-11-17 08:38:34,138 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10914 states and 19735 transitions. [2024-11-17 08:38:34,142 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-17 08:38:34,144 INFO L425 stractBuchiCegarLoop]: Abstraction has 10914 states and 19735 transitions. [2024-11-17 08:38:34,144 INFO L332 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-11-17 08:38:34,145 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10914 states and 19735 transitions. [2024-11-17 08:38:34,182 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9499 [2024-11-17 08:38:34,184 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:38:34,184 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:38:34,192 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:34,192 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:34,192 INFO L745 eck$LassoCheckResult]: Stem: 48429#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 48430#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 48693#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 48770#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 48771#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 47362#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 47363#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 46063#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 46064#L1632 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 46343#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 47742#L813 assume 0 == initPersonOnFloor_~floor#1; 46878#L814 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 45860#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 48712#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 45800#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 47940#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 47941#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 48552#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 48553#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 48298#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 46574#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 46575#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 48372#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 46259#L3046-1 assume !(1 == ~doorState~0); 46260#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 46866#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 46868#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 48334#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 48619#L2331-11 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 48327#L1116-17 assume true;stopRequestedInDirection__wrappee__weight_#t~ret62#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~19#1 := stopRequestedInDirection__wrappee__weight_#t~ret62#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1; 48328#L2335-11 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~19#1); 48222#L2341-11 assume !(~currentFloorID~0 < 0); 48223#L2353-11 assume true; 48229#L2357-11 assume !(~currentFloorID~0 < 0); 48572#L2366-11 assume true; 48573#L2370-11 assume ~currentFloorID~0 < 1; 48827#L2371-11 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 46664#L542-117 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 46666#L560-117 assume true;stopRequestedInDirection__wrappee__weight_#t~ret64#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret64#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret64#1; 48489#L2375-11 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 45678#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 50038#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 50037#L3054-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 48664#L2746-3 assume !(1 == ~currentHeading~0); 48070#L2756-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 47659#L2762-3 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 48285#L2767-3 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 45550#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 49040#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 49039#L1769-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 49038#L1770-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 49037#L2136-5 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 49023#L1774-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 49011#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 49009#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 49007#L1365 [2024-11-17 08:38:34,193 INFO L747 eck$LassoCheckResult]: Loop: 49007#L1365 assume true; 49006#L1365-1 assume !false; 49005#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 49004#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 49003#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 49002#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 48998#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 48992#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 48981#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 48970#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 48969#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 48968#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 48966#L2808 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 48964#L2127-1 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 48961#L2144 assume !(0 == buttonForFloorIsPressed_~floorID#1); 48959#L2148 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 48960#L2165 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 50094#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 50091#L2955 assume !(0 != timeShift_~tmp___9~2#1); 50085#L3046 assume 1 == ~doorState~0;~doorState~0 := 0; 50083#L3052 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 50079#L2711-1 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 50074#L2732-1 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 50070#L2684-1 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 50066#L2331-5 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 50064#L2500-5 assume !(0 == ~currentFloorID~0); 47696#L2506-5 assume ~currentFloorID~0 > 0; 47697#L2507-5 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 47916#L542-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 47918#L560-55 assume true;stopRequestedInDirection__wrappee__weight_#t~ret68#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret68#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret68#1; 45815#L2511-5 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 45816#L2502-5 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 51116#L2702-1 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 51117#L3054 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 51135#L2746 assume !(1 == ~currentHeading~0); 48723#L2756 assume !(0 == ~currentFloorID~0); 48284#L2762 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 48861#L2767 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 45771#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 49065#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 49064#L1769 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 49062#L1770 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 49063#L2136 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 49046#L1774 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 49041#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 49008#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 49007#L1365 [2024-11-17 08:38:34,193 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:34,194 INFO L85 PathProgramCache]: Analyzing trace with hash -685645078, now seen corresponding path program 3 times [2024-11-17 08:38:34,194 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:34,194 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [348144108] [2024-11-17 08:38:34,194 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:34,195 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:34,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:34,274 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:34,275 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:34,275 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [348144108] [2024-11-17 08:38:34,275 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [348144108] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:34,275 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:34,276 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:38:34,276 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1360015022] [2024-11-17 08:38:34,276 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:34,276 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:38:34,276 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:34,277 INFO L85 PathProgramCache]: Analyzing trace with hash -1614052137, now seen corresponding path program 1 times [2024-11-17 08:38:34,277 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:34,277 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1246178284] [2024-11-17 08:38:34,277 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:34,278 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:34,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:34,358 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:34,359 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:34,359 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1246178284] [2024-11-17 08:38:34,359 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1246178284] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:34,359 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:34,359 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:38:34,360 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [745988985] [2024-11-17 08:38:34,360 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:34,360 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:38:34,360 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:38:34,361 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-17 08:38:34,361 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-17 08:38:34,362 INFO L87 Difference]: Start difference. First operand 10914 states and 19735 transitions. cyclomatic complexity: 8822 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:34,726 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:38:34,726 INFO L93 Difference]: Finished difference Result 19744 states and 35836 transitions. [2024-11-17 08:38:34,726 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 19744 states and 35836 transitions. [2024-11-17 08:38:34,827 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 18070 [2024-11-17 08:38:34,906 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 19744 states to 19731 states and 35815 transitions. [2024-11-17 08:38:34,907 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 19731 [2024-11-17 08:38:34,932 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 19731 [2024-11-17 08:38:34,933 INFO L73 IsDeterministic]: Start isDeterministic. Operand 19731 states and 35815 transitions. [2024-11-17 08:38:34,961 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:38:34,962 INFO L218 hiAutomatonCegarLoop]: Abstraction has 19731 states and 35815 transitions. [2024-11-17 08:38:34,987 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19731 states and 35815 transitions. [2024-11-17 08:38:35,399 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19731 to 19723. [2024-11-17 08:38:35,432 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19723 states, 19723 states have (on average 1.8152917913096385) internal successors, (35803), 19722 states have internal predecessors, (35803), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:35,477 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19723 states to 19723 states and 35803 transitions. [2024-11-17 08:38:35,478 INFO L240 hiAutomatonCegarLoop]: Abstraction has 19723 states and 35803 transitions. [2024-11-17 08:38:35,478 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-17 08:38:35,479 INFO L425 stractBuchiCegarLoop]: Abstraction has 19723 states and 35803 transitions. [2024-11-17 08:38:35,479 INFO L332 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-11-17 08:38:35,479 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 19723 states and 35803 transitions. [2024-11-17 08:38:35,695 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 18064 [2024-11-17 08:38:35,696 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:38:35,696 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:38:35,702 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:35,702 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:35,702 INFO L745 eck$LassoCheckResult]: Stem: 79153#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 79154#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 79437#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 79524#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 79525#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 78047#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 78048#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 76736#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 76737#L1632 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 77018#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 78439#L813 assume 0 == initPersonOnFloor_~floor#1; 77561#L814 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 76534#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 79459#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 76473#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 78637#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 78638#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 79282#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 79283#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 79006#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 77249#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 77250#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 79086#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 76934#L3046-1 assume !(1 == ~doorState~0); 76935#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 77548#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 77550#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 79047#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 79351#L2331-11 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 79040#L1116-17 assume true;stopRequestedInDirection__wrappee__weight_#t~ret62#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~19#1 := stopRequestedInDirection__wrappee__weight_#t~ret62#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1; 79041#L2335-11 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~19#1); 78926#L2341-11 assume !(~currentFloorID~0 < 0); 78927#L2353-11 assume true; 78933#L2357-11 assume !(~currentFloorID~0 < 0); 79302#L2366-11 assume true; 79303#L2370-11 assume ~currentFloorID~0 < 1; 79580#L2371-11 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 77344#L542-117 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 77346#L560-117 assume true;stopRequestedInDirection__wrappee__weight_#t~ret64#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret64#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret64#1; 79215#L2375-11 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 76350#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 79953#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 79878#L3054-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 79404#L2746-3 assume !(1 == ~currentHeading~0); 78766#L2756-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 78353#L2762-3 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 80112#L2767-3 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 80085#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 80081#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 80080#L1769-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 80078#L1770-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 80079#L2136-5 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 80055#L1774-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 80033#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 80030#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 80025#L1365 [2024-11-17 08:38:35,703 INFO L747 eck$LassoCheckResult]: Loop: 80025#L1365 assume true; 80023#L1365-1 assume !false; 80021#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 80015#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 80013#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 80002#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 79990#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 79984#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 79978#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 79968#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 79967#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 79966#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 79945#L2808 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 79942#L2127-1 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 79934#L2144 assume !(0 == buttonForFloorIsPressed_~floorID#1); 79930#L2148 assume !(1 == buttonForFloorIsPressed_~floorID#1); 79925#L2152 assume 2 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_2~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 79921#L2165 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 79920#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 79917#L2955 assume !(0 != timeShift_~tmp___9~2#1); 79916#L3046 assume 1 == ~doorState~0;~doorState~0 := 0; 79915#L3052 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 79913#L2711-1 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 79909#L2732-1 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 79907#L2684-1 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 79905#L2331-5 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 79906#L2500-5 assume !(0 == ~currentFloorID~0); 79958#L2506-5 assume !(~currentFloorID~0 > 0); 79954#L2518-5 assume true; 79952#L2522-5 assume ~currentFloorID~0 > 0; 79951#L2523-5 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 79950#L2524-5 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 78331#L2502-5 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 84315#L2702-1 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 83402#L3054 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 80167#L2746 assume !(1 == ~currentHeading~0); 80150#L2756 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 78992#L2762 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 80122#L2767 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 80095#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 80090#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 80088#L1769 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 80087#L1770 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 80086#L2136 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 80040#L1774 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 80032#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 80029#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 80025#L1365 [2024-11-17 08:38:35,704 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:35,704 INFO L85 PathProgramCache]: Analyzing trace with hash -489131573, now seen corresponding path program 1 times [2024-11-17 08:38:35,704 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:35,704 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1998626194] [2024-11-17 08:38:35,705 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:35,705 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:35,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:35,783 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:35,783 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:35,783 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1998626194] [2024-11-17 08:38:35,786 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1998626194] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:35,786 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:35,786 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:38:35,786 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [762005273] [2024-11-17 08:38:35,786 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:35,786 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:38:35,787 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:35,787 INFO L85 PathProgramCache]: Analyzing trace with hash 2071594305, now seen corresponding path program 1 times [2024-11-17 08:38:35,787 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:35,787 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1154220298] [2024-11-17 08:38:35,787 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:35,787 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:35,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:35,882 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:35,883 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:35,883 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1154220298] [2024-11-17 08:38:35,884 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1154220298] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:35,884 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:35,884 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:38:35,884 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1409375812] [2024-11-17 08:38:35,884 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:35,885 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:38:35,885 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:38:35,885 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-17 08:38:35,885 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2024-11-17 08:38:35,886 INFO L87 Difference]: Start difference. First operand 19723 states and 35803 transitions. cyclomatic complexity: 16084 Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 5 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:37,059 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:38:37,059 INFO L93 Difference]: Finished difference Result 36203 states and 65839 transitions. [2024-11-17 08:38:37,059 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 36203 states and 65839 transitions. [2024-11-17 08:38:37,239 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 34394 [2024-11-17 08:38:37,436 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 36203 states to 36053 states and 65669 transitions. [2024-11-17 08:38:37,436 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 36053 [2024-11-17 08:38:37,517 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 36053 [2024-11-17 08:38:37,517 INFO L73 IsDeterministic]: Start isDeterministic. Operand 36053 states and 65669 transitions. [2024-11-17 08:38:37,567 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:38:37,567 INFO L218 hiAutomatonCegarLoop]: Abstraction has 36053 states and 65669 transitions. [2024-11-17 08:38:37,605 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36053 states and 65669 transitions. [2024-11-17 08:38:38,175 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36053 to 24314. [2024-11-17 08:38:38,211 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24314 states, 24314 states have (on average 1.8120835732499794) internal successors, (44059), 24313 states have internal predecessors, (44059), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:38,264 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24314 states to 24314 states and 44059 transitions. [2024-11-17 08:38:38,264 INFO L240 hiAutomatonCegarLoop]: Abstraction has 24314 states and 44059 transitions. [2024-11-17 08:38:38,265 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-17 08:38:38,266 INFO L425 stractBuchiCegarLoop]: Abstraction has 24314 states and 44059 transitions. [2024-11-17 08:38:38,266 INFO L332 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-11-17 08:38:38,266 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 24314 states and 44059 transitions. [2024-11-17 08:38:38,345 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 22655 [2024-11-17 08:38:38,345 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:38:38,345 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:38:38,356 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:38,356 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:38,357 INFO L745 eck$LassoCheckResult]: Stem: 135107#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 135108#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 135427#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 135515#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 135516#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 133998#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 133999#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 132673#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 132674#L1632 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 132959#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 134387#L813 assume 0 == initPersonOnFloor_~floor#1; 133507#L814 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 132469#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 135449#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 132408#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 134589#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 134590#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 135249#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 135250#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 134967#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 133192#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 133193#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 135049#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 132873#L3046-1 assume !(1 == ~doorState~0); 132874#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 133494#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 133496#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 135008#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 135333#L2331-11 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 135001#L1116-17 assume true;stopRequestedInDirection__wrappee__weight_#t~ret62#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~19#1 := stopRequestedInDirection__wrappee__weight_#t~ret62#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1; 135002#L2335-11 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~19#1); 134887#L2341-11 assume !(~currentFloorID~0 < 0); 134888#L2353-11 assume true; 134894#L2357-11 assume !(~currentFloorID~0 < 0); 135270#L2366-11 assume true; 135271#L2370-11 assume ~currentFloorID~0 < 1; 135584#L2371-11 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 133283#L542-117 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 133285#L560-117 assume true;stopRequestedInDirection__wrappee__weight_#t~ret64#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret64#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret64#1; 135175#L2375-11 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 132286#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 135791#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 135790#L3054-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 135389#L2746-3 assume !(1 == ~currentHeading~0); 134719#L2756-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 134300#L2762-3 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 135979#L2767-3 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 135976#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 135970#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 135962#L1769-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 135961#L1770-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 135960#L2136-5 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 135935#L1774-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 135915#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 135912#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 135910#L1365 [2024-11-17 08:38:38,357 INFO L747 eck$LassoCheckResult]: Loop: 135910#L1365 assume true; 135909#L1365-1 assume !false; 135908#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 135907#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 135906#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 135905#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 135897#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 135882#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 135874#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 135864#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 135863#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 135861#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 135858#L2808 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 135853#L542-60 assume !(0 == isFloorCalling_~floorID#1); 135845#L546-60 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 135841#L560-60 assume true;stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1; 135836#L2779 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1; 135833#L2791 assume true;stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 135830#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 135828#L2955 assume !(0 != timeShift_~tmp___9~2#1); 135826#L3046 assume 1 == ~doorState~0;~doorState~0 := 0; 135820#L3052 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 135816#L2711-1 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 135809#L2732-1 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 135799#L2684-1 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 135798#L2331-5 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 135781#L2500-5 assume !(0 == ~currentFloorID~0); 135778#L2506-5 assume !(~currentFloorID~0 > 0); 135775#L2518-5 assume true; 135774#L2522-5 assume ~currentFloorID~0 > 0; 135773#L2523-5 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 135772#L2524-5 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 134868#L2502-5 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 139028#L2702-1 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 138113#L3054 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 137459#L2746 assume !(1 == ~currentHeading~0); 137246#L2756 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 134951#L2762 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 135969#L2767 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 135959#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 135958#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 135953#L1769 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 135947#L1770 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 135941#L2136 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 135920#L1774 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 135914#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 135911#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 135910#L1365 [2024-11-17 08:38:38,358 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:38,358 INFO L85 PathProgramCache]: Analyzing trace with hash -489131573, now seen corresponding path program 2 times [2024-11-17 08:38:38,358 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:38,358 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1084236694] [2024-11-17 08:38:38,358 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:38,359 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:38,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:38,443 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:38,444 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:38,444 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1084236694] [2024-11-17 08:38:38,444 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1084236694] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:38,444 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:38,444 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:38:38,444 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1143629342] [2024-11-17 08:38:38,444 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:38,445 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:38:38,445 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:38,445 INFO L85 PathProgramCache]: Analyzing trace with hash 1547113026, now seen corresponding path program 1 times [2024-11-17 08:38:38,445 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:38,445 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1059709344] [2024-11-17 08:38:38,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:38,445 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:38,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:38,530 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:38,531 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:38,531 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1059709344] [2024-11-17 08:38:38,531 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1059709344] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:38,531 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:38,531 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-17 08:38:38,531 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1402809434] [2024-11-17 08:38:38,532 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:38,532 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:38:38,532 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:38:38,532 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-17 08:38:38,532 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-17 08:38:38,533 INFO L87 Difference]: Start difference. First operand 24314 states and 44059 transitions. cyclomatic complexity: 19749 Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 7 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:38,887 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:38:38,888 INFO L93 Difference]: Finished difference Result 24377 states and 44122 transitions. [2024-11-17 08:38:38,888 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24377 states and 44122 transitions. [2024-11-17 08:38:38,993 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 22715 [2024-11-17 08:38:39,067 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24377 states to 24377 states and 44122 transitions. [2024-11-17 08:38:39,068 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24377 [2024-11-17 08:38:39,090 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24377 [2024-11-17 08:38:39,091 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24377 states and 44122 transitions. [2024-11-17 08:38:39,114 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:38:39,114 INFO L218 hiAutomatonCegarLoop]: Abstraction has 24377 states and 44122 transitions. [2024-11-17 08:38:39,134 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24377 states and 44122 transitions. [2024-11-17 08:38:39,509 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24377 to 24368. [2024-11-17 08:38:39,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24368 states, 24368 states have (on average 1.8102839789888379) internal successors, (44113), 24367 states have internal predecessors, (44113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:39,618 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24368 states to 24368 states and 44113 transitions. [2024-11-17 08:38:39,618 INFO L240 hiAutomatonCegarLoop]: Abstraction has 24368 states and 44113 transitions. [2024-11-17 08:38:39,619 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-17 08:38:39,621 INFO L425 stractBuchiCegarLoop]: Abstraction has 24368 states and 44113 transitions. [2024-11-17 08:38:39,621 INFO L332 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-11-17 08:38:39,622 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 24368 states and 44113 transitions. [2024-11-17 08:38:39,714 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 22706 [2024-11-17 08:38:39,715 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:38:39,715 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:38:39,725 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:39,726 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:39,726 INFO L745 eck$LassoCheckResult]: Stem: 183769#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 183770#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 184055#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 184140#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 184141#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 182684#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 182685#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 181373#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 181374#L1632 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 181659#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 183071#L813 assume 0 == initPersonOnFloor_~floor#1; 182197#L814 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 181173#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 184075#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 181110#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 183269#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 183270#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 183898#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 183899#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 183628#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 181889#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 181890#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 183708#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 181573#L3046-1 assume !(1 == ~doorState~0); 181574#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 182184#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 182186#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 183669#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 183972#L2331-11 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 183661#L1116-17 assume true;stopRequestedInDirection__wrappee__weight_#t~ret62#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~19#1 := stopRequestedInDirection__wrappee__weight_#t~ret62#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1; 183662#L2335-11 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~19#1); 183550#L2341-11 assume !(~currentFloorID~0 < 0); 183551#L2353-11 assume true; 183557#L2357-11 assume !(~currentFloorID~0 < 0); 183918#L2366-11 assume true; 183919#L2370-11 assume ~currentFloorID~0 < 1; 184199#L2371-11 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 181979#L542-117 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 181981#L560-117 assume true;stopRequestedInDirection__wrappee__weight_#t~ret64#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret64#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret64#1; 183831#L2375-11 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 180987#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 184565#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 184564#L3054-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 184024#L2746-3 assume !(1 == ~currentHeading~0); 183393#L2756-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 182984#L2762-3 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 183849#L2767-3 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 180860#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 188573#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 188572#L1769-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 188571#L1770-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 184236#L2136-5 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 184237#L1774-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 188549#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 188547#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 188545#L1365 [2024-11-17 08:38:39,726 INFO L747 eck$LassoCheckResult]: Loop: 188545#L1365 assume true; 188544#L1365-1 assume !false; 188543#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 188542#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 188541#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 188540#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 188536#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 188530#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 188524#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 188514#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 188511#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 188509#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 188506#L2808 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 188507#L2127-1 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 189538#L2144 assume !(0 == buttonForFloorIsPressed_~floorID#1); 188503#L2148 assume !(1 == buttonForFloorIsPressed_~floorID#1); 188504#L2152 assume !(2 == buttonForFloorIsPressed_~floorID#1); 189589#L2156 assume 3 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_3~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 193354#L2165 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 193353#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 193352#L2955 assume !(0 != timeShift_~tmp___9~2#1); 193350#L3046 assume 1 == ~doorState~0;~doorState~0 := 0; 181170#L3052 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 181171#L2711-1 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 186404#L2732-1 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 184573#L2684-1 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 184571#L2331-5 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 184572#L2500-5 assume !(0 == ~currentFloorID~0); 184615#L2506-5 assume !(~currentFloorID~0 > 0); 184612#L2518-5 assume true; 184607#L2522-5 assume ~currentFloorID~0 > 0; 184606#L2523-5 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 184605#L2524-5 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 183533#L2502-5 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 192169#L2702-1 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 191057#L3054 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 184282#L2746 assume !(1 == ~currentHeading~0); 184283#L2756 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 183613#L2762 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 184241#L2767 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 181081#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 188601#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 188600#L1769 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 188598#L1770 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 188599#L2136 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 188582#L1774 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 188577#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 188546#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 188545#L1365 [2024-11-17 08:38:39,728 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:39,728 INFO L85 PathProgramCache]: Analyzing trace with hash -489131573, now seen corresponding path program 3 times [2024-11-17 08:38:39,728 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:39,730 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1318240478] [2024-11-17 08:38:39,730 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:39,731 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:39,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:39,805 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:39,806 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:39,806 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1318240478] [2024-11-17 08:38:39,808 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1318240478] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:39,809 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:39,809 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:38:39,809 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [349840609] [2024-11-17 08:38:39,809 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:39,809 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:38:39,810 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:39,810 INFO L85 PathProgramCache]: Analyzing trace with hash -1082103730, now seen corresponding path program 1 times [2024-11-17 08:38:39,810 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:39,810 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1247089592] [2024-11-17 08:38:39,810 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:39,810 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:39,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:40,091 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:40,092 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:40,092 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1247089592] [2024-11-17 08:38:40,092 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1247089592] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:40,092 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:40,092 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:38:40,092 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [791311947] [2024-11-17 08:38:40,092 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:40,093 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:38:40,093 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:38:40,093 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-17 08:38:40,093 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2024-11-17 08:38:40,093 INFO L87 Difference]: Start difference. First operand 24368 states and 44113 transitions. cyclomatic complexity: 19749 Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:41,275 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:38:41,275 INFO L93 Difference]: Finished difference Result 45396 states and 82289 transitions. [2024-11-17 08:38:41,275 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 45396 states and 82289 transitions. [2024-11-17 08:38:41,426 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 43449 [2024-11-17 08:38:41,617 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 45396 states to 45111 states and 81975 transitions. [2024-11-17 08:38:41,617 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 45111 [2024-11-17 08:38:41,655 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 45111 [2024-11-17 08:38:41,655 INFO L73 IsDeterministic]: Start isDeterministic. Operand 45111 states and 81975 transitions. [2024-11-17 08:38:41,694 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:38:41,695 INFO L218 hiAutomatonCegarLoop]: Abstraction has 45111 states and 81975 transitions. [2024-11-17 08:38:41,732 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45111 states and 81975 transitions. [2024-11-17 08:38:42,346 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45111 to 29193. [2024-11-17 08:38:42,375 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29193 states, 29193 states have (on average 1.8065289624224985) internal successors, (52738), 29192 states have internal predecessors, (52738), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:42,445 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29193 states to 29193 states and 52738 transitions. [2024-11-17 08:38:42,445 INFO L240 hiAutomatonCegarLoop]: Abstraction has 29193 states and 52738 transitions. [2024-11-17 08:38:42,445 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-17 08:38:42,446 INFO L425 stractBuchiCegarLoop]: Abstraction has 29193 states and 52738 transitions. [2024-11-17 08:38:42,446 INFO L332 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-11-17 08:38:42,446 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29193 states and 52738 transitions. [2024-11-17 08:38:42,562 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 27531 [2024-11-17 08:38:42,563 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:38:42,563 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:38:42,574 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:42,574 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:42,575 INFO L745 eck$LassoCheckResult]: Stem: 253609#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 253610#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 253920#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 254024#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 254025#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 252478#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 252479#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 251147#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 251148#L1632 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 251431#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 252877#L813 assume 0 == initPersonOnFloor_~floor#1; 251978#L814 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 250944#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 253948#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 250883#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 253083#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 253084#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 253745#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 253746#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 253459#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 251666#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 251667#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 254447#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 251345#L3046-1 assume !(1 == ~doorState~0); 251346#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 251964#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 251966#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 253502#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 253828#L2331-11 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 253495#L1116-17 assume true;stopRequestedInDirection__wrappee__weight_#t~ret62#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~19#1 := stopRequestedInDirection__wrappee__weight_#t~ret62#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1; 253496#L2335-11 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~19#1); 253376#L2341-11 assume !(~currentFloorID~0 < 0); 253377#L2353-11 assume true; 253383#L2357-11 assume !(~currentFloorID~0 < 0); 253767#L2366-11 assume true; 253768#L2370-11 assume ~currentFloorID~0 < 1; 254093#L2371-11 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 251757#L542-117 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 251759#L560-117 assume true;stopRequestedInDirection__wrappee__weight_#t~ret64#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret64#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret64#1; 253675#L2375-11 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 250761#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 256442#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 254390#L3054-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 253887#L2746-3 assume !(1 == ~currentHeading~0); 253213#L2756-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 252781#L2762-3 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 254694#L2767-3 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 254692#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 254689#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 254688#L1769-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 254684#L1770-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 254683#L2136-5 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 254614#L1774-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 254591#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 254586#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 254582#L1365 [2024-11-17 08:38:42,575 INFO L747 eck$LassoCheckResult]: Loop: 254582#L1365 assume true; 254580#L1365-1 assume !false; 254577#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 254575#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 254573#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 254567#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 254554#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 254549#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 254527#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 254511#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 254505#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 254502#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 254491#L2808 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 254486#L2127-1 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 254478#L2144 assume !(0 == buttonForFloorIsPressed_~floorID#1); 254473#L2148 assume !(1 == buttonForFloorIsPressed_~floorID#1); 254463#L2152 assume !(2 == buttonForFloorIsPressed_~floorID#1); 254458#L2156 assume !(3 == buttonForFloorIsPressed_~floorID#1); 254451#L2160 assume !(4 == buttonForFloorIsPressed_~floorID#1);buttonForFloorIsPressed_~retValue_acc~16#1 := 0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 254448#L2165 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 254443#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 254440#L2955 assume !(0 != timeShift_~tmp___9~2#1); 254438#L3046 assume 1 == ~doorState~0;~doorState~0 := 0; 254437#L3052 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 254434#L2711-1 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 254430#L2732-1 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 254428#L2684-1 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 254426#L2331-5 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 254427#L2500-5 assume !(0 == ~currentFloorID~0); 254509#L2506-5 assume ~currentFloorID~0 > 0; 254507#L2507-5 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 254508#L542-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 254517#L560-55 assume true;stopRequestedInDirection__wrappee__weight_#t~ret68#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret68#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret68#1; 254510#L2511-5 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 253355#L2502-5 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 260293#L2702-1 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 260279#L3054 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 259643#L2746 assume !(1 == ~currentHeading~0); 259644#L2756 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 253443#L2762 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 254677#L2767 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 254670#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 254669#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 254667#L1769 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 254666#L1770 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 254665#L2136 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 254599#L1774 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 254590#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 254585#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 254582#L1365 [2024-11-17 08:38:42,576 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:42,576 INFO L85 PathProgramCache]: Analyzing trace with hash -489131573, now seen corresponding path program 4 times [2024-11-17 08:38:42,576 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:42,576 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [340500368] [2024-11-17 08:38:42,577 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:42,577 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:42,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:42,654 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:42,654 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:42,654 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [340500368] [2024-11-17 08:38:42,655 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [340500368] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:42,655 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:42,655 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:38:42,655 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [584873613] [2024-11-17 08:38:42,655 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:42,656 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:38:42,656 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:42,656 INFO L85 PathProgramCache]: Analyzing trace with hash -378462731, now seen corresponding path program 1 times [2024-11-17 08:38:42,656 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:42,657 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1448580498] [2024-11-17 08:38:42,657 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:42,657 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:42,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:42,734 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:42,734 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:42,735 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1448580498] [2024-11-17 08:38:42,735 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1448580498] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:42,735 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:42,735 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:38:42,735 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1644004490] [2024-11-17 08:38:42,735 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:42,735 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:38:42,736 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:38:42,736 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-17 08:38:42,736 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-17 08:38:42,736 INFO L87 Difference]: Start difference. First operand 29193 states and 52738 transitions. cyclomatic complexity: 23549 Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:43,979 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:38:43,979 INFO L93 Difference]: Finished difference Result 29621 states and 53379 transitions. [2024-11-17 08:38:43,979 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29621 states and 53379 transitions. [2024-11-17 08:38:44,119 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 27937 [2024-11-17 08:38:44,206 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29621 states to 29599 states and 53348 transitions. [2024-11-17 08:38:44,206 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29599 [2024-11-17 08:38:44,408 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29599 [2024-11-17 08:38:44,408 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29599 states and 53348 transitions. [2024-11-17 08:38:44,429 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:38:44,430 INFO L218 hiAutomatonCegarLoop]: Abstraction has 29599 states and 53348 transitions. [2024-11-17 08:38:44,449 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29599 states and 53348 transitions. [2024-11-17 08:38:44,649 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29599 to 28595. [2024-11-17 08:38:44,675 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28595 states, 28595 states have (on average 1.8012939325056827) internal successors, (51508), 28594 states have internal predecessors, (51508), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:44,721 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28595 states to 28595 states and 51508 transitions. [2024-11-17 08:38:44,721 INFO L240 hiAutomatonCegarLoop]: Abstraction has 28595 states and 51508 transitions. [2024-11-17 08:38:44,722 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-17 08:38:44,722 INFO L425 stractBuchiCegarLoop]: Abstraction has 28595 states and 51508 transitions. [2024-11-17 08:38:44,722 INFO L332 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-11-17 08:38:44,722 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28595 states and 51508 transitions. [2024-11-17 08:38:44,799 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 26933 [2024-11-17 08:38:44,799 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:38:44,799 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:38:44,804 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:44,804 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:44,804 INFO L745 eck$LassoCheckResult]: Stem: 312403#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 312404#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 312698#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 312784#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 312785#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 311290#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 311291#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 309969#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 309970#L1632 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 310252#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 311674#L813 assume 0 == initPersonOnFloor_~floor#1; 310794#L814 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 309768#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 312719#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 309709#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 311873#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 311874#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 312532#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 312533#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 312253#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 310487#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 310488#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 313168#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 310167#L3046-1 assume !(1 == ~doorState~0); 310168#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 310781#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 310783#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 312295#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 312606#L2331-11 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 312288#L1116-17 assume true;stopRequestedInDirection__wrappee__weight_#t~ret62#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~19#1 := stopRequestedInDirection__wrappee__weight_#t~ret62#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1; 312289#L2335-11 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~19#1); 312172#L2341-11 assume !(~currentFloorID~0 < 0); 312173#L2353-11 assume true; 312179#L2357-11 assume !(~currentFloorID~0 < 0); 312552#L2366-11 assume true; 312553#L2370-11 assume ~currentFloorID~0 < 1; 312846#L2371-11 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 310576#L542-117 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 310578#L560-117 assume true;stopRequestedInDirection__wrappee__weight_#t~ret64#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret64#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret64#1; 312468#L2375-11 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 309587#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 313304#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 313139#L3054-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 312665#L2746-3 assume !(1 == ~currentHeading~0); 312007#L2756-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 311587#L2762-3 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 313452#L2767-3 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 314489#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 314488#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 314484#L1769-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 314482#L1770-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 314483#L2136-5 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 314457#L1774-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 314448#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 314447#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 314441#L1365 [2024-11-17 08:38:44,805 INFO L747 eck$LassoCheckResult]: Loop: 314441#L1365 assume true; 314439#L1365-1 assume !false; 314438#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 314437#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 314436#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 314435#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 314431#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 314429#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 314373#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 314364#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 314363#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 314362#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 314360#L2808 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 314361#L2127-1 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 334657#L2144 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 314339#L2165 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 314338#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 314336#L2955 assume !(0 != timeShift_~tmp___9~2#1); 314335#L3046 assume 1 == ~doorState~0;~doorState~0 := 0; 314334#L3052 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 314331#L2711-1 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 314326#L2732-1 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 314323#L2684-1 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 314324#L2331-5 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 314333#L1116-8 assume true;stopRequestedInDirection__wrappee__weight_#t~ret62#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~19#1 := stopRequestedInDirection__wrappee__weight_#t~ret62#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1; 314327#L2335-5 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~19#1); 314325#L2341-5 assume !(~currentFloorID~0 < 0); 314322#L2353-5 assume true; 314319#L2357-5 assume !(~currentFloorID~0 < 0); 314317#L2366-5 assume true; 314315#L2370-5 assume ~currentFloorID~0 < 1; 314312#L2371-5 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 314313#L542-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 314699#L560-51 assume true;stopRequestedInDirection__wrappee__weight_#t~ret64#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret64#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret64#1; 314194#L2375-5 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 314149#L2502-5 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 314146#L2702-1 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 314144#L3054 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 314143#L2746 assume !(1 == ~currentHeading~0); 314142#L2756 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 312236#L2762 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 313555#L2767 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 314502#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 314501#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 314500#L1769 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 314498#L1770 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 314499#L2136 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 314466#L1774 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 314449#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 314446#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 314441#L1365 [2024-11-17 08:38:44,806 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:44,806 INFO L85 PathProgramCache]: Analyzing trace with hash -489131573, now seen corresponding path program 5 times [2024-11-17 08:38:44,806 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:44,806 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1139229954] [2024-11-17 08:38:44,806 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:44,806 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:44,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:45,060 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:45,060 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:45,060 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1139229954] [2024-11-17 08:38:45,060 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1139229954] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:45,061 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:45,061 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:38:45,061 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1320224125] [2024-11-17 08:38:45,061 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:45,061 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:38:45,061 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:45,061 INFO L85 PathProgramCache]: Analyzing trace with hash -741762508, now seen corresponding path program 1 times [2024-11-17 08:38:45,062 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:45,062 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [699273935] [2024-11-17 08:38:45,062 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:45,062 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:45,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:45,151 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:45,151 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:45,151 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [699273935] [2024-11-17 08:38:45,151 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [699273935] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:45,151 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:45,152 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:38:45,152 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2082847676] [2024-11-17 08:38:45,152 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:45,152 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:38:45,152 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:38:45,153 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-17 08:38:45,153 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-17 08:38:45,153 INFO L87 Difference]: Start difference. First operand 28595 states and 51508 transitions. cyclomatic complexity: 22915 Second operand has 4 states, 4 states have (on average 12.5) internal successors, (50), 4 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:46,429 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:38:46,429 INFO L93 Difference]: Finished difference Result 28618 states and 51199 transitions. [2024-11-17 08:38:46,429 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28618 states and 51199 transitions. [2024-11-17 08:38:46,654 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 26956 [2024-11-17 08:38:46,750 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28618 states to 28618 states and 51199 transitions. [2024-11-17 08:38:46,750 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28618 [2024-11-17 08:38:46,778 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28618 [2024-11-17 08:38:46,778 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28618 states and 51199 transitions. [2024-11-17 08:38:46,803 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:38:46,803 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28618 states and 51199 transitions. [2024-11-17 08:38:46,825 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28618 states and 51199 transitions. [2024-11-17 08:38:47,014 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28618 to 28595. [2024-11-17 08:38:47,039 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28595 states, 28595 states have (on average 1.7896835111033398) internal successors, (51176), 28594 states have internal predecessors, (51176), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:47,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28595 states to 28595 states and 51176 transitions. [2024-11-17 08:38:47,307 INFO L240 hiAutomatonCegarLoop]: Abstraction has 28595 states and 51176 transitions. [2024-11-17 08:38:47,308 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-17 08:38:47,308 INFO L425 stractBuchiCegarLoop]: Abstraction has 28595 states and 51176 transitions. [2024-11-17 08:38:47,308 INFO L332 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2024-11-17 08:38:47,308 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28595 states and 51176 transitions. [2024-11-17 08:38:47,398 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 26933 [2024-11-17 08:38:47,398 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:38:47,399 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:38:47,406 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:47,406 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:47,407 INFO L745 eck$LassoCheckResult]: Stem: 369598#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 369599#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 369877#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 369959#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 369960#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 368495#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 368496#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 367187#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 367188#L1632 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 367467#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 368883#L813 assume 0 == initPersonOnFloor_~floor#1; 368002#L814 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 366989#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 369896#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 366930#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 369082#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 369083#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 369722#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 369723#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 369455#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 367697#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 367698#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 370326#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 367383#L3046-1 assume !(1 == ~doorState~0); 367384#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 367990#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 367992#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 369498#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 369792#L2331-11 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 369004#L2500-11 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 368910#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 368911#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 368433#L3054-1 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 368434#L2829-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~26#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 369196#L2834-3 assume true;timeShift_#t~ret103#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 369756#L2711-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 366985#L2732-2 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 370014#L2684-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 369817#L2331-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 369818#L2500-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 366982#L2502-8 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 366983#L2702-2 assume true;timeShift_#t~ret104#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 367280#L3063-1 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 369025#L2746-5 assume !(1 == ~currentHeading~0); 369026#L2756-5 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 369679#L2762-5 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 376457#L2767-5 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 376455#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 376454#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 376453#L1769-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 376452#L1770-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 376451#L2136-5 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 376437#L1774-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 376425#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 376423#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 376421#L1365 [2024-11-17 08:38:47,408 INFO L747 eck$LassoCheckResult]: Loop: 376421#L1365 assume true; 376420#L1365-1 assume !false; 376419#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 376418#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 376417#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 376416#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 376412#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 376406#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 376400#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 376376#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 376374#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 376372#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 376369#L2808 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 376370#L2127-1 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 379526#L2144 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 374356#L2165 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 374347#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 374348#L2955 assume !(0 != timeShift_~tmp___9~2#1); 374044#L3046 assume 1 == ~doorState~0;~doorState~0 := 0; 374043#L3052 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 374041#L2711-1 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 374037#L2732-1 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 374035#L2684-1 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 374036#L2331-5 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 372830#L2500-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 372828#L2502-5 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 372825#L2702-1 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 372824#L3054 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 372823#L2829-1 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~26#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 372822#L2834-1 assume true;timeShift_#t~ret103#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 372820#L2711 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 372815#L2732 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 372800#L2684 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 367822#L2331-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 367824#L2500-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 366695#L2502-2 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 366696#L2702 assume true;timeShift_#t~ret104#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 369541#L3063 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 369673#L2746-2 assume !(1 == ~currentHeading~0); 369299#L2756-2 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 369263#L2762-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 376482#L2767-2 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 376481#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 376480#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 376478#L1769 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 376476#L1770 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 376477#L2136 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 376463#L1774 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 376458#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 376422#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 376421#L1365 [2024-11-17 08:38:47,408 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:47,408 INFO L85 PathProgramCache]: Analyzing trace with hash -630865116, now seen corresponding path program 1 times [2024-11-17 08:38:47,409 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:47,409 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [320382109] [2024-11-17 08:38:47,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:47,409 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:47,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:47,510 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:47,511 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:47,511 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [320382109] [2024-11-17 08:38:47,511 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [320382109] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:47,511 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:47,511 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:38:47,512 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1565933882] [2024-11-17 08:38:47,512 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:47,512 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:38:47,513 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:47,513 INFO L85 PathProgramCache]: Analyzing trace with hash -883496051, now seen corresponding path program 1 times [2024-11-17 08:38:47,514 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:47,514 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1700861641] [2024-11-17 08:38:47,514 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:47,514 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:47,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:47,683 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:47,683 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:47,683 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1700861641] [2024-11-17 08:38:47,684 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1700861641] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:47,684 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:47,684 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-11-17 08:38:47,684 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [191761401] [2024-11-17 08:38:47,684 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:47,684 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:38:47,684 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:38:47,685 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-17 08:38:47,685 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2024-11-17 08:38:47,685 INFO L87 Difference]: Start difference. First operand 28595 states and 51176 transitions. cyclomatic complexity: 22583 Second operand has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:49,522 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:38:49,523 INFO L93 Difference]: Finished difference Result 48204 states and 86957 transitions. [2024-11-17 08:38:49,523 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 48204 states and 86957 transitions. [2024-11-17 08:38:49,701 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 46534 [2024-11-17 08:38:49,860 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 48204 states to 48204 states and 86957 transitions. [2024-11-17 08:38:49,860 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 48204 [2024-11-17 08:38:49,906 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 48204 [2024-11-17 08:38:49,907 INFO L73 IsDeterministic]: Start isDeterministic. Operand 48204 states and 86957 transitions. [2024-11-17 08:38:49,949 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:38:49,949 INFO L218 hiAutomatonCegarLoop]: Abstraction has 48204 states and 86957 transitions. [2024-11-17 08:38:49,987 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48204 states and 86957 transitions. [2024-11-17 08:38:50,513 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48204 to 42920. [2024-11-17 08:38:50,551 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42920 states, 42920 states have (on average 1.809878844361603) internal successors, (77680), 42919 states have internal predecessors, (77680), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:50,620 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42920 states to 42920 states and 77680 transitions. [2024-11-17 08:38:50,620 INFO L240 hiAutomatonCegarLoop]: Abstraction has 42920 states and 77680 transitions. [2024-11-17 08:38:50,621 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-11-17 08:38:50,621 INFO L425 stractBuchiCegarLoop]: Abstraction has 42920 states and 77680 transitions. [2024-11-17 08:38:50,621 INFO L332 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2024-11-17 08:38:50,621 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 42920 states and 77680 transitions. [2024-11-17 08:38:50,741 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:38:50,741 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:38:50,741 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:38:50,746 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:50,746 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:50,747 INFO L745 eck$LassoCheckResult]: Stem: 446414#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 446415#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 446704#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 446783#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 446784#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 445314#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 445315#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 444007#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 444008#L1632 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 444287#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 445703#L813 assume 0 == initPersonOnFloor_~floor#1; 444824#L814 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 443809#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 446725#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 443748#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 445904#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 445905#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 446546#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 446547#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 446275#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 444518#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 444519#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 447130#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 444202#L3046-1 assume !(1 == ~doorState~0); 444203#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 444812#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 444814#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 446316#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 446615#L2331-11 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 445826#L2500-11 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 445729#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 445730#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 445252#L3054-1 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 445253#L2829-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~26#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 446016#L2834-3 assume true;timeShift_#t~ret103#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 446579#L2711-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 443805#L2732-2 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 446845#L2684-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 446640#L2331-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 446641#L2500-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 443802#L2502-8 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 443803#L2702-2 assume true;timeShift_#t~ret104#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 444101#L3063-1 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 445848#L2746-5 assume !(1 == ~currentHeading~0); 445849#L2756-5 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 446500#L2762-5 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 443497#L2767-5 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 443498#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 446663#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 446664#L1769-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 455825#L1780-1 assume true; 455826#L1784-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 456960#L1785-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 456959#L2136-6 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 444433#L1789-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 444434#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 444898#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 456953#L1365 [2024-11-17 08:38:50,747 INFO L747 eck$LassoCheckResult]: Loop: 456953#L1365 assume true; 456949#L1365-1 assume !false; 456946#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 456945#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 456944#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 456943#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 456935#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 456920#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 456911#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 456900#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 456898#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 456897#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 456832#L2808 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 456833#L542-60 assume !(0 == isFloorCalling_~floorID#1); 456990#L546-60 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 456987#L560-60 assume true;stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1; 456971#L2779 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1; 447545#L2791 assume true;stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 473442#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 473440#L2955 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 447534#L2957 assume !(0 != ~persons_0~0); 473395#L2971 assume !(0 != ~persons_1~0); 473371#L2985 assume !(0 != ~persons_2~0); 473341#L2999 assume !(0 != ~persons_3~0); 473329#L3013 assume !(0 != ~persons_4~0); 473323#L3027 assume !(0 != ~persons_5~0); 473320#L3042 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~24#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 473318#L633-5 assume 0 == isPersonOnFloor_~floor#1; 473295#L634-5 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 473276#L788-5 assume true;processWaitingOnFloor_#t~ret83#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret83#1;havoc processWaitingOnFloor_#t~ret83#1; 473273#L2857 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 473272#L2868 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 473271#L633-4 assume 0 == isPersonOnFloor_~floor#1; 473133#L634-4 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 473122#L788-4 assume true;processWaitingOnFloor_#t~ret85#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret85#1;havoc processWaitingOnFloor_#t~ret85#1; 473120#L2870 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 473118#L2881 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 473111#L633-3 assume 0 == isPersonOnFloor_~floor#1; 473065#L634-3 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 473058#L788-3 assume true;processWaitingOnFloor_#t~ret87#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret87#1;havoc processWaitingOnFloor_#t~ret87#1; 473054#L2883 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 473048#L2894 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 472915#L633-2 assume 0 == isPersonOnFloor_~floor#1; 472892#L634-2 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 472868#L788-2 assume true;processWaitingOnFloor_#t~ret89#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret89#1;havoc processWaitingOnFloor_#t~ret89#1; 472864#L2896 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 472863#L2907 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 472862#L633-1 assume 0 == isPersonOnFloor_~floor#1; 472837#L634-1 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 472814#L788-1 assume true;processWaitingOnFloor_#t~ret91#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret91#1;havoc processWaitingOnFloor_#t~ret91#1; 472811#L2909 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 472806#L2920 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 472804#L633 assume 0 == isPersonOnFloor_~floor#1; 472772#L634 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 472765#L788 assume true;processWaitingOnFloor_#t~ret93#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret93#1;havoc processWaitingOnFloor_#t~ret93#1; 472762#L2922 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 472760#L2933 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 472755#L577 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 472754#L598 assume true;havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 472753#L2935 assume true;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 472748#L2098 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 472747#L2119 assume true;havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 472746#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 472745#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 472744#L1769 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 472743#L1780 assume true; 472740#L1784 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 472738#L1785 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 472737#L2136-1 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 470095#L1789 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 456968#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 456956#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 456953#L1365 [2024-11-17 08:38:50,748 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:50,748 INFO L85 PathProgramCache]: Analyzing trace with hash 1539671599, now seen corresponding path program 1 times [2024-11-17 08:38:50,748 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:50,748 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1927383884] [2024-11-17 08:38:50,748 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:50,748 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:50,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:50,816 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:50,817 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:50,817 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1927383884] [2024-11-17 08:38:50,817 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1927383884] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:50,817 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:50,817 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:38:50,818 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [915055755] [2024-11-17 08:38:50,818 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:50,818 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:38:50,818 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:50,818 INFO L85 PathProgramCache]: Analyzing trace with hash 1734979992, now seen corresponding path program 1 times [2024-11-17 08:38:50,819 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:50,819 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1889973798] [2024-11-17 08:38:50,819 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:50,819 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:50,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:50,902 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:50,903 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:50,903 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1889973798] [2024-11-17 08:38:50,903 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1889973798] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:50,903 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:50,903 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-17 08:38:50,903 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1056830766] [2024-11-17 08:38:50,903 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:50,903 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:38:50,904 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:38:50,904 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-17 08:38:50,904 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-17 08:38:50,905 INFO L87 Difference]: Start difference. First operand 42920 states and 77680 transitions. cyclomatic complexity: 34763 Second operand has 3 states, 3 states have (on average 19.0) internal successors, (57), 3 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:51,345 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:38:51,345 INFO L93 Difference]: Finished difference Result 42920 states and 77674 transitions. [2024-11-17 08:38:51,345 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 42920 states and 77674 transitions. [2024-11-17 08:38:51,541 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:38:51,634 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 42920 states to 42920 states and 77674 transitions. [2024-11-17 08:38:51,634 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 42920 [2024-11-17 08:38:51,665 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 42920 [2024-11-17 08:38:51,665 INFO L73 IsDeterministic]: Start isDeterministic. Operand 42920 states and 77674 transitions. [2024-11-17 08:38:51,688 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:38:51,688 INFO L218 hiAutomatonCegarLoop]: Abstraction has 42920 states and 77674 transitions. [2024-11-17 08:38:51,715 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42920 states and 77674 transitions. [2024-11-17 08:38:52,294 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42920 to 42920. [2024-11-17 08:38:52,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42920 states, 42920 states have (on average 1.8097390493942218) internal successors, (77674), 42919 states have internal predecessors, (77674), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:52,424 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42920 states to 42920 states and 77674 transitions. [2024-11-17 08:38:52,424 INFO L240 hiAutomatonCegarLoop]: Abstraction has 42920 states and 77674 transitions. [2024-11-17 08:38:52,424 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-17 08:38:52,425 INFO L425 stractBuchiCegarLoop]: Abstraction has 42920 states and 77674 transitions. [2024-11-17 08:38:52,425 INFO L332 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2024-11-17 08:38:52,425 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 42920 states and 77674 transitions. [2024-11-17 08:38:52,562 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:38:52,562 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:38:52,562 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:38:52,568 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:52,569 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:52,569 INFO L745 eck$LassoCheckResult]: Stem: 532280#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 532281#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 532566#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 532651#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 532652#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 531167#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 531168#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 529857#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 529858#L1632 assume !(0 == getOrigin_~person#1); 531966#L1636 assume !(1 == getOrigin_~person#1); 532059#L1640 assume !(2 == getOrigin_~person#1); 532309#L1644 assume !(3 == getOrigin_~person#1); 530140#L1648 assume !(4 == getOrigin_~person#1); 530141#L1652 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 531373#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 531561#L813 assume 0 == initPersonOnFloor_~floor#1; 530678#L814 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 529659#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 532588#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 529600#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 531760#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 531761#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 532406#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 532407#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 532139#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 530370#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 530371#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 533054#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 530054#L3046-1 assume !(1 == ~doorState~0); 530055#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 530665#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 530667#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 532180#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 532479#L2331-11 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 531682#L2500-11 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 531589#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 531590#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 531104#L3054-1 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 531105#L2829-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~26#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 531873#L2834-3 assume true;timeShift_#t~ret103#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 532441#L2711-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 529655#L2732-2 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 532708#L2684-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 532502#L2331-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 532503#L2500-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 529652#L2502-8 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 529653#L2702-2 assume true;timeShift_#t~ret104#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 529951#L3063-1 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 531704#L2746-5 assume !(1 == ~currentHeading~0); 531705#L2756-5 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 532363#L2762-5 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 535029#L2767-5 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 532457#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 532458#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 537859#L1769-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 537857#L1780-1 assume true; 537848#L1784-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 537849#L1785-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 537850#L2136-6 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 537830#L1789-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 537818#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 537816#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 537814#L1365 [2024-11-17 08:38:52,570 INFO L747 eck$LassoCheckResult]: Loop: 537814#L1365 assume true; 537813#L1365-1 assume !false; 537812#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 537811#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 537810#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 537809#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 537801#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 537786#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 537778#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 537768#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 537767#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 537766#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 537763#L2808 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 537765#L542-60 assume !(0 == isFloorCalling_~floorID#1); 542325#L546-60 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 542323#L560-60 assume true;stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1; 542321#L2779 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1; 533654#L2791 assume true;stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 550064#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 550063#L2955 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 533051#L2957 assume !(0 != ~persons_0~0); 550030#L2971 assume !(0 != ~persons_1~0); 550000#L2985 assume !(0 != ~persons_2~0); 549994#L2999 assume !(0 != ~persons_3~0); 549964#L3013 assume !(0 != ~persons_4~0); 549958#L3027 assume !(0 != ~persons_5~0); 549955#L3042 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~24#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 549954#L633-5 assume 0 == isPersonOnFloor_~floor#1; 549867#L634-5 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 549843#L788-5 assume true;processWaitingOnFloor_#t~ret83#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret83#1;havoc processWaitingOnFloor_#t~ret83#1; 549839#L2857 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 549838#L2868 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 549837#L633-4 assume 0 == isPersonOnFloor_~floor#1; 549741#L634-4 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 549730#L788-4 assume true;processWaitingOnFloor_#t~ret85#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret85#1;havoc processWaitingOnFloor_#t~ret85#1; 549728#L2870 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 549726#L2881 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 549724#L633-3 assume 0 == isPersonOnFloor_~floor#1; 549485#L634-3 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 549483#L788-3 assume true;processWaitingOnFloor_#t~ret87#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret87#1;havoc processWaitingOnFloor_#t~ret87#1; 548144#L2883 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 548143#L2894 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 548142#L633-2 assume 0 == isPersonOnFloor_~floor#1; 548104#L634-2 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 548085#L788-2 assume true;processWaitingOnFloor_#t~ret89#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret89#1;havoc processWaitingOnFloor_#t~ret89#1; 547843#L2896 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 540905#L2907 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 540487#L633-1 assume 0 == isPersonOnFloor_~floor#1; 538262#L634-1 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 538251#L788-1 assume true;processWaitingOnFloor_#t~ret91#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret91#1;havoc processWaitingOnFloor_#t~ret91#1; 538249#L2909 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 538247#L2920 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 538239#L633 assume 0 == isPersonOnFloor_~floor#1; 537944#L634 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 537941#L788 assume true;processWaitingOnFloor_#t~ret93#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret93#1;havoc processWaitingOnFloor_#t~ret93#1; 537939#L2922 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 537937#L2933 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 537889#L577 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 537880#L598 assume true;havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 537879#L2935 assume true;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 537869#L2098 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 537864#L2119 assume true;havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 537862#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 537861#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 537860#L1769 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 537858#L1780 assume true; 537856#L1784 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 537853#L1785 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 537851#L2136-1 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 537827#L1789 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 537817#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 537815#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 537814#L1365 [2024-11-17 08:38:52,571 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:52,571 INFO L85 PathProgramCache]: Analyzing trace with hash 244488078, now seen corresponding path program 1 times [2024-11-17 08:38:52,571 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:52,571 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1481685222] [2024-11-17 08:38:52,571 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:52,572 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:52,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:52,742 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:52,742 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:52,742 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1481685222] [2024-11-17 08:38:52,742 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1481685222] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:52,742 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:52,742 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-17 08:38:52,742 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [673122135] [2024-11-17 08:38:52,743 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:52,743 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:38:52,743 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:52,743 INFO L85 PathProgramCache]: Analyzing trace with hash 1734979992, now seen corresponding path program 2 times [2024-11-17 08:38:52,743 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:52,744 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [57470799] [2024-11-17 08:38:52,744 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:52,744 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:52,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:52,864 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:52,865 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:52,865 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [57470799] [2024-11-17 08:38:52,865 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [57470799] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:52,865 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:52,865 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-17 08:38:52,865 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1783089990] [2024-11-17 08:38:52,866 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:52,866 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:38:52,866 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:38:52,867 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-17 08:38:52,867 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-17 08:38:52,868 INFO L87 Difference]: Start difference. First operand 42920 states and 77674 transitions. cyclomatic complexity: 34757 Second operand has 6 states, 6 states have (on average 10.333333333333334) internal successors, (62), 6 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:53,106 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:38:53,106 INFO L93 Difference]: Finished difference Result 42914 states and 77661 transitions. [2024-11-17 08:38:53,106 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 42914 states and 77661 transitions. [2024-11-17 08:38:53,306 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:38:53,813 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 42914 states to 42914 states and 77661 transitions. [2024-11-17 08:38:53,813 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 42914 [2024-11-17 08:38:53,849 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 42914 [2024-11-17 08:38:53,850 INFO L73 IsDeterministic]: Start isDeterministic. Operand 42914 states and 77661 transitions. [2024-11-17 08:38:53,899 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:38:53,900 INFO L218 hiAutomatonCegarLoop]: Abstraction has 42914 states and 77661 transitions. [2024-11-17 08:38:53,940 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42914 states and 77661 transitions. [2024-11-17 08:38:54,173 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42914 to 42914. [2024-11-17 08:38:54,210 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42914 states, 42914 states have (on average 1.809689145733327) internal successors, (77661), 42913 states have internal predecessors, (77661), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:54,276 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42914 states to 42914 states and 77661 transitions. [2024-11-17 08:38:54,276 INFO L240 hiAutomatonCegarLoop]: Abstraction has 42914 states and 77661 transitions. [2024-11-17 08:38:54,276 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-17 08:38:54,277 INFO L425 stractBuchiCegarLoop]: Abstraction has 42914 states and 77661 transitions. [2024-11-17 08:38:54,277 INFO L332 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2024-11-17 08:38:54,277 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 42914 states and 77661 transitions. [2024-11-17 08:38:54,396 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:38:54,396 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:38:54,396 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:38:54,402 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:54,402 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:54,402 INFO L745 eck$LassoCheckResult]: Stem: 618117#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 618118#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 618408#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 618498#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 618499#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 617009#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 617010#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 615705#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 615706#L1632 assume !(0 == getOrigin_~person#1); 617803#L1636 assume !(1 == getOrigin_~person#1); 617893#L1640 assume !(2 == getOrigin_~person#1); 618145#L1644 assume !(3 == getOrigin_~person#1); 615983#L1648 assume !(4 == getOrigin_~person#1); 615984#L1652 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 617211#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 617400#L813 assume !(0 == initPersonOnFloor_~floor#1); 617810#L840 assume 1 == initPersonOnFloor_~floor#1; 615508#L841 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 615509#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 618430#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 615448#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 617596#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 617597#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 618246#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 618247#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 617973#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 616215#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 616216#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 618704#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 615900#L3046-1 assume !(1 == ~doorState~0); 615901#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 616507#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 616509#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 618013#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 618322#L2331-11 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 617518#L2500-11 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 617427#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 617428#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 616947#L3054-1 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 616948#L2829-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~26#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 617715#L2834-3 assume true;timeShift_#t~ret103#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 618283#L2711-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 615503#L2732-2 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 618554#L2684-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 618343#L2331-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 618344#L2500-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 615500#L2502-8 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 615501#L2702-2 assume true;timeShift_#t~ret104#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 615798#L3063-1 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 617542#L2746-5 assume !(1 == ~currentHeading~0); 617543#L2756-5 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 618201#L2762-5 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 615198#L2767-5 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 615199#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 618301#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 618368#L1769-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 618386#L1780-1 assume true; 615765#L1784-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 615766#L1785-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 616485#L2136-6 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 616130#L1789-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 616131#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 616593#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 616821#L1365 [2024-11-17 08:38:54,403 INFO L747 eck$LassoCheckResult]: Loop: 616821#L1365 assume true; 649124#L1365-1 assume !false; 649122#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 649120#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 649112#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 649049#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 623090#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 623084#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 623078#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 623068#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 623066#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 623064#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 623060#L2808 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 623057#L542-60 assume !(0 == isFloorCalling_~floorID#1); 623053#L546-60 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 623049#L560-60 assume true;stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1; 623047#L2779 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1; 623048#L2791 assume true;stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 650106#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 650099#L2955 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 621104#L2957 assume !(0 != ~persons_0~0); 650066#L2971 assume !(0 != ~persons_1~0); 650060#L2985 assume !(0 != ~persons_2~0); 650030#L2999 assume !(0 != ~persons_3~0); 650024#L3013 assume !(0 != ~persons_4~0); 650003#L3027 assume !(0 != ~persons_5~0); 649969#L3042 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~24#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 649967#L633-5 assume 0 == isPersonOnFloor_~floor#1; 649793#L634-5 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 649744#L788-5 assume true;processWaitingOnFloor_#t~ret83#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret83#1;havoc processWaitingOnFloor_#t~ret83#1; 649727#L2857 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 649725#L2868 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 649724#L633-4 assume 0 == isPersonOnFloor_~floor#1; 649693#L634-4 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 649683#L788-4 assume true;processWaitingOnFloor_#t~ret85#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret85#1;havoc processWaitingOnFloor_#t~ret85#1; 649676#L2870 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 649673#L2881 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 649671#L633-3 assume 0 == isPersonOnFloor_~floor#1; 649629#L634-3 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 649622#L788-3 assume true;processWaitingOnFloor_#t~ret87#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret87#1;havoc processWaitingOnFloor_#t~ret87#1; 649618#L2883 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 649606#L2894 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 649603#L633-2 assume 0 == isPersonOnFloor_~floor#1; 649567#L634-2 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 649543#L788-2 assume true;processWaitingOnFloor_#t~ret89#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret89#1;havoc processWaitingOnFloor_#t~ret89#1; 649539#L2896 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 649538#L2907 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 649537#L633-1 assume 0 == isPersonOnFloor_~floor#1; 649499#L634-1 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 649487#L788-1 assume true;processWaitingOnFloor_#t~ret91#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret91#1;havoc processWaitingOnFloor_#t~ret91#1; 649485#L2909 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 649483#L2920 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 649478#L633 assume 0 == isPersonOnFloor_~floor#1; 649443#L634 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 649436#L788 assume true;processWaitingOnFloor_#t~ret93#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret93#1;havoc processWaitingOnFloor_#t~ret93#1; 649433#L2922 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 649431#L2933 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 649364#L577 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 649358#L598 assume true;havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 649355#L2935 assume true;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 649176#L2098 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 649175#L2119 assume true;havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 615419#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 649161#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 649158#L1769 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 649155#L1780 assume true; 649154#L1784 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 649152#L1785 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 649148#L2136-1 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 649144#L1789 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 649135#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 649130#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 616821#L1365 [2024-11-17 08:38:54,403 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:54,403 INFO L85 PathProgramCache]: Analyzing trace with hash 665231299, now seen corresponding path program 1 times [2024-11-17 08:38:54,404 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:54,404 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [717728151] [2024-11-17 08:38:54,404 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:54,404 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:54,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:54,491 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:54,491 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:54,492 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [717728151] [2024-11-17 08:38:54,492 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [717728151] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:54,492 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:54,492 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:38:54,492 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1953125634] [2024-11-17 08:38:54,492 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:54,494 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:38:54,494 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:54,494 INFO L85 PathProgramCache]: Analyzing trace with hash 1734979992, now seen corresponding path program 3 times [2024-11-17 08:38:54,494 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:54,495 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1547614428] [2024-11-17 08:38:54,495 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:54,495 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:54,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:54,583 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:54,584 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:54,584 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1547614428] [2024-11-17 08:38:54,584 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1547614428] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:54,584 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:54,584 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-17 08:38:54,584 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2130445635] [2024-11-17 08:38:54,585 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:54,586 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:38:54,586 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:38:54,586 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-17 08:38:54,586 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-17 08:38:54,586 INFO L87 Difference]: Start difference. First operand 42914 states and 77661 transitions. cyclomatic complexity: 34750 Second operand has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:55,156 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:38:55,156 INFO L93 Difference]: Finished difference Result 42922 states and 77670 transitions. [2024-11-17 08:38:55,156 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 42922 states and 77670 transitions. [2024-11-17 08:38:55,321 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:38:55,440 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 42922 states to 42922 states and 77670 transitions. [2024-11-17 08:38:55,441 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 42922 [2024-11-17 08:38:55,478 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 42922 [2024-11-17 08:38:55,479 INFO L73 IsDeterministic]: Start isDeterministic. Operand 42922 states and 77670 transitions. [2024-11-17 08:38:55,508 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:38:55,508 INFO L218 hiAutomatonCegarLoop]: Abstraction has 42922 states and 77670 transitions. [2024-11-17 08:38:55,535 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42922 states and 77670 transitions. [2024-11-17 08:38:55,787 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42922 to 42914. [2024-11-17 08:38:56,246 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42914 states, 42914 states have (on average 1.8095959360581628) internal successors, (77657), 42913 states have internal predecessors, (77657), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:56,336 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42914 states to 42914 states and 77657 transitions. [2024-11-17 08:38:56,337 INFO L240 hiAutomatonCegarLoop]: Abstraction has 42914 states and 77657 transitions. [2024-11-17 08:38:56,337 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-17 08:38:56,338 INFO L425 stractBuchiCegarLoop]: Abstraction has 42914 states and 77657 transitions. [2024-11-17 08:38:56,338 INFO L332 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2024-11-17 08:38:56,338 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 42914 states and 77657 transitions. [2024-11-17 08:38:56,442 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:38:56,442 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:38:56,442 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:38:56,447 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:56,447 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:56,447 INFO L745 eck$LassoCheckResult]: Stem: 703962#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 703963#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 704247#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 704336#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 704337#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 702858#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 702859#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 701554#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 701555#L1632 assume !(0 == getOrigin_~person#1); 703653#L1636 assume !(1 == getOrigin_~person#1); 703741#L1640 assume !(2 == getOrigin_~person#1); 703989#L1644 assume !(3 == getOrigin_~person#1); 701832#L1648 assume !(4 == getOrigin_~person#1); 701833#L1652 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 703061#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 703247#L813 assume !(0 == initPersonOnFloor_~floor#1); 703659#L840 assume 1 == initPersonOnFloor_~floor#1; 701355#L841 assume !(0 == initPersonOnFloor_~person#1); 701356#L844 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 701631#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 704269#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 701296#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 703448#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 703449#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 704088#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 704089#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 703823#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 702066#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 702067#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 704551#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 701749#L3046-1 assume !(1 == ~doorState~0); 701750#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 702361#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 702363#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 703863#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 704160#L2331-11 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 703368#L2500-11 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 703369#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 704803#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 704755#L3054-1 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 704754#L2829-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~26#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 704753#L2834-3 assume true;timeShift_#t~ret103#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 704748#L2711-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 704747#L2732-2 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 704745#L2684-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 704744#L2331-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 704642#L2500-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 704629#L2502-8 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 704628#L2702-2 assume true;timeShift_#t~ret104#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 704627#L3063-1 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 703390#L2746-5 assume !(1 == ~currentHeading~0); 703391#L2756-5 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 704045#L2762-5 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 706403#L2767-5 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 708792#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 708787#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 708785#L1769-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 708783#L1780-1 assume true; 708778#L1784-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 708779#L1785-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 708780#L2136-6 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 708742#L1789-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 708740#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 708739#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 708737#L1365 [2024-11-17 08:38:56,448 INFO L747 eck$LassoCheckResult]: Loop: 708737#L1365 assume true; 708736#L1365-1 assume !false; 708731#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 708729#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 708728#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 708727#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 708717#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 708715#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 708710#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 708558#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 708520#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 708518#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 708511#L2808 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 708492#L542-60 assume !(0 == isFloorCalling_~floorID#1); 708488#L546-60 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 708487#L560-60 assume true;stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1; 708485#L2779 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1; 708486#L2791 assume true;stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 710315#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 710314#L2955 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 710285#L2957 assume !(0 != ~persons_0~0); 710279#L2971 assume !(0 != ~persons_1~0); 710249#L2985 assume !(0 != ~persons_2~0); 710243#L2999 assume !(0 != ~persons_3~0); 710213#L3013 assume !(0 != ~persons_4~0); 710207#L3027 assume !(0 != ~persons_5~0); 710204#L3042 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~24#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 710203#L633-5 assume 0 == isPersonOnFloor_~floor#1; 709513#L634-5 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 709489#L788-5 assume true;processWaitingOnFloor_#t~ret83#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret83#1;havoc processWaitingOnFloor_#t~ret83#1; 709485#L2857 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 709484#L2868 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 709483#L633-4 assume 0 == isPersonOnFloor_~floor#1; 709368#L634-4 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 709357#L788-4 assume true;processWaitingOnFloor_#t~ret85#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret85#1;havoc processWaitingOnFloor_#t~ret85#1; 709355#L2870 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 709353#L2881 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 709352#L633-3 assume 0 == isPersonOnFloor_~floor#1; 709317#L634-3 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 709310#L788-3 assume true;processWaitingOnFloor_#t~ret87#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret87#1;havoc processWaitingOnFloor_#t~ret87#1; 709306#L2883 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 709305#L2894 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 709304#L633-2 assume 0 == isPersonOnFloor_~floor#1; 709288#L634-2 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 709264#L788-2 assume true;processWaitingOnFloor_#t~ret89#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret89#1;havoc processWaitingOnFloor_#t~ret89#1; 709251#L2896 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 709249#L2907 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 709247#L633-1 assume 0 == isPersonOnFloor_~floor#1; 709126#L634-1 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 709114#L788-1 assume true;processWaitingOnFloor_#t~ret91#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret91#1;havoc processWaitingOnFloor_#t~ret91#1; 709112#L2909 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 709110#L2920 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 709109#L633 assume 0 == isPersonOnFloor_~floor#1; 709075#L634 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 709074#L788 assume true;processWaitingOnFloor_#t~ret93#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret93#1;havoc processWaitingOnFloor_#t~ret93#1; 709072#L2922 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 709070#L2933 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 709064#L577 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 709061#L598 assume true;havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 709059#L2935 assume true;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 708796#L2098 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 708789#L2119 assume true;havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 708786#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 708784#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 708782#L1769 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 708781#L1780 assume true; 708777#L1784 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 708775#L1785 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 708776#L2136-1 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 708761#L1789 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 708751#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 708738#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 708737#L1365 [2024-11-17 08:38:56,448 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:56,449 INFO L85 PathProgramCache]: Analyzing trace with hash 1937920503, now seen corresponding path program 1 times [2024-11-17 08:38:56,449 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:56,449 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [532535255] [2024-11-17 08:38:56,449 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:56,449 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:56,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:56,529 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:56,529 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:56,529 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [532535255] [2024-11-17 08:38:56,529 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [532535255] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:56,530 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:56,530 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:38:56,530 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [68097482] [2024-11-17 08:38:56,530 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:56,530 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:38:56,531 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:56,531 INFO L85 PathProgramCache]: Analyzing trace with hash 1734979992, now seen corresponding path program 4 times [2024-11-17 08:38:56,531 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:56,531 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [450270966] [2024-11-17 08:38:56,531 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:56,531 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:56,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:56,588 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:56,588 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:56,588 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [450270966] [2024-11-17 08:38:56,588 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [450270966] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:56,588 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:56,588 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:38:56,589 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1316597975] [2024-11-17 08:38:56,589 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:56,589 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:38:56,589 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:38:56,589 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-17 08:38:56,589 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-17 08:38:56,590 INFO L87 Difference]: Start difference. First operand 42914 states and 77657 transitions. cyclomatic complexity: 34746 Second operand has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:56,832 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:38:56,832 INFO L93 Difference]: Finished difference Result 42922 states and 77666 transitions. [2024-11-17 08:38:56,832 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 42922 states and 77666 transitions. [2024-11-17 08:38:57,052 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:38:57,206 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 42922 states to 42922 states and 77666 transitions. [2024-11-17 08:38:57,206 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 42922 [2024-11-17 08:38:57,248 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 42922 [2024-11-17 08:38:57,249 INFO L73 IsDeterministic]: Start isDeterministic. Operand 42922 states and 77666 transitions. [2024-11-17 08:38:57,285 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:38:57,285 INFO L218 hiAutomatonCegarLoop]: Abstraction has 42922 states and 77666 transitions. [2024-11-17 08:38:57,319 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42922 states and 77666 transitions. [2024-11-17 08:38:58,144 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42922 to 42914. [2024-11-17 08:38:58,183 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42914 states, 42914 states have (on average 1.8095027263829986) internal successors, (77653), 42913 states have internal predecessors, (77653), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:58,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42914 states to 42914 states and 77653 transitions. [2024-11-17 08:38:58,268 INFO L240 hiAutomatonCegarLoop]: Abstraction has 42914 states and 77653 transitions. [2024-11-17 08:38:58,268 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-17 08:38:58,269 INFO L425 stractBuchiCegarLoop]: Abstraction has 42914 states and 77653 transitions. [2024-11-17 08:38:58,269 INFO L332 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2024-11-17 08:38:58,269 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 42914 states and 77653 transitions. [2024-11-17 08:38:58,411 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:38:58,411 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:38:58,411 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:38:58,416 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:58,416 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:38:58,417 INFO L745 eck$LassoCheckResult]: Stem: 789825#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 789826#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 790118#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 790207#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 790208#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 788703#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 788704#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 787399#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 787400#L1632 assume !(0 == getOrigin_~person#1); 789503#L1636 assume !(1 == getOrigin_~person#1); 789594#L1640 assume !(2 == getOrigin_~person#1); 789855#L1644 assume !(3 == getOrigin_~person#1); 787676#L1648 assume !(4 == getOrigin_~person#1); 787677#L1652 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 788906#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 789095#L813 assume !(0 == initPersonOnFloor_~floor#1); 789510#L840 assume 1 == initPersonOnFloor_~floor#1; 787202#L841 assume !(0 == initPersonOnFloor_~person#1); 787203#L844 assume !(1 == initPersonOnFloor_~person#1); 789650#L847 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 787476#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 790142#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 787142#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 789296#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 789297#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 789952#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 789953#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 789672#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 787907#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 787908#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 790423#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 787593#L3046-1 assume !(1 == ~doorState~0); 787594#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 788200#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 788202#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 789714#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 790027#L2331-11 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 789217#L2500-11 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 789218#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 790680#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 790627#L3054-1 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 790626#L2829-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~26#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 790625#L2834-3 assume true;timeShift_#t~ret103#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 790620#L2711-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 790619#L2732-2 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 790617#L2684-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 790616#L2331-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 790514#L2500-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 790501#L2502-8 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 790500#L2702-2 assume true;timeShift_#t~ret104#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 790499#L3063-1 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 789239#L2746-5 assume !(1 == ~currentHeading~0); 789240#L2756-5 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 789909#L2762-5 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 791364#L2767-5 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 790005#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 790006#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 790225#L1769-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 790226#L1780-1 assume true; 799440#L1784-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 799441#L1785-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 788178#L2136-6 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 787821#L1789-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 787822#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 788286#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 788515#L1365 [2024-11-17 08:38:58,417 INFO L747 eck$LassoCheckResult]: Loop: 788515#L1365 assume true; 824283#L1365-1 assume !false; 824282#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 824281#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 824280#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 824279#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 824275#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 824273#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 801358#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 801351#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 801349#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 801347#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 801344#L2808 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 801337#L542-60 assume !(0 == isFloorCalling_~floorID#1); 801333#L546-60 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 801332#L560-60 assume true;stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1; 801330#L2779 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1; 801331#L2791 assume true;stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 825015#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 825013#L2955 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 790472#L2957 assume !(0 != ~persons_0~0); 824993#L2971 assume !(0 != ~persons_1~0); 824974#L2985 assume !(0 != ~persons_2~0); 824968#L2999 assume !(0 != ~persons_3~0); 824938#L3013 assume !(0 != ~persons_4~0); 824932#L3027 assume !(0 != ~persons_5~0); 824929#L3042 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~24#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 824928#L633-5 assume 0 == isPersonOnFloor_~floor#1; 824899#L634-5 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 824880#L788-5 assume true;processWaitingOnFloor_#t~ret83#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret83#1;havoc processWaitingOnFloor_#t~ret83#1; 824877#L2857 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 824876#L2868 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 824875#L633-4 assume 0 == isPersonOnFloor_~floor#1; 824847#L634-4 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 824826#L788-4 assume true;processWaitingOnFloor_#t~ret85#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret85#1;havoc processWaitingOnFloor_#t~ret85#1; 824822#L2870 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 824819#L2881 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 824813#L633-3 assume 0 == isPersonOnFloor_~floor#1; 824610#L634-3 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 824603#L788-3 assume true;processWaitingOnFloor_#t~ret87#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret87#1;havoc processWaitingOnFloor_#t~ret87#1; 824599#L2883 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 824598#L2894 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 824597#L633-2 assume 0 == isPersonOnFloor_~floor#1; 824581#L634-2 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 824557#L788-2 assume true;processWaitingOnFloor_#t~ret89#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret89#1;havoc processWaitingOnFloor_#t~ret89#1; 824553#L2896 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 824552#L2907 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 824551#L633-1 assume 0 == isPersonOnFloor_~floor#1; 824467#L634-1 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 824455#L788-1 assume true;processWaitingOnFloor_#t~ret91#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret91#1;havoc processWaitingOnFloor_#t~ret91#1; 824372#L2909 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 824369#L2920 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 824365#L633 assume 0 == isPersonOnFloor_~floor#1; 824333#L634 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 824326#L788 assume true;processWaitingOnFloor_#t~ret93#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret93#1;havoc processWaitingOnFloor_#t~ret93#1; 824323#L2922 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 824321#L2933 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 824316#L577 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 824315#L598 assume true;havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 824314#L2935 assume true;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 824309#L2098 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 824308#L2119 assume true;havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 787113#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 824307#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 824306#L1769 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 824305#L1780 assume true; 824304#L1784 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 824302#L1785 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 824298#L2136-1 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 824294#L1789 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 824285#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 824284#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 788515#L1365 [2024-11-17 08:38:58,418 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:58,418 INFO L85 PathProgramCache]: Analyzing trace with hash 1906321248, now seen corresponding path program 1 times [2024-11-17 08:38:58,418 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:58,418 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2068644861] [2024-11-17 08:38:58,418 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:58,419 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:58,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:58,523 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:58,523 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:58,523 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2068644861] [2024-11-17 08:38:58,523 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2068644861] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:58,523 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:58,524 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:38:58,524 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2128495625] [2024-11-17 08:38:58,524 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:58,524 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:38:58,525 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:38:58,525 INFO L85 PathProgramCache]: Analyzing trace with hash 1734979992, now seen corresponding path program 5 times [2024-11-17 08:38:58,525 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:38:58,525 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [252308258] [2024-11-17 08:38:58,525 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:38:58,525 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:38:58,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:38:58,597 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:38:58,597 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:38:58,598 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [252308258] [2024-11-17 08:38:58,598 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [252308258] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:38:58,598 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:38:58,598 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:38:58,598 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1675785149] [2024-11-17 08:38:58,598 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:38:58,599 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:38:58,599 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:38:58,599 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-17 08:38:58,599 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-17 08:38:58,599 INFO L87 Difference]: Start difference. First operand 42914 states and 77653 transitions. cyclomatic complexity: 34742 Second operand has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:38:58,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:38:58,877 INFO L93 Difference]: Finished difference Result 42922 states and 77662 transitions. [2024-11-17 08:38:58,877 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 42922 states and 77662 transitions. [2024-11-17 08:38:59,574 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:38:59,724 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 42922 states to 42922 states and 77662 transitions. [2024-11-17 08:38:59,725 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 42922 [2024-11-17 08:38:59,764 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 42922 [2024-11-17 08:38:59,764 INFO L73 IsDeterministic]: Start isDeterministic. Operand 42922 states and 77662 transitions. [2024-11-17 08:38:59,799 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:38:59,799 INFO L218 hiAutomatonCegarLoop]: Abstraction has 42922 states and 77662 transitions. [2024-11-17 08:38:59,830 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42922 states and 77662 transitions. [2024-11-17 08:39:00,093 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42922 to 42914. [2024-11-17 08:39:00,129 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42914 states, 42914 states have (on average 1.8094095167078343) internal successors, (77649), 42913 states have internal predecessors, (77649), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:00,194 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42914 states to 42914 states and 77649 transitions. [2024-11-17 08:39:00,194 INFO L240 hiAutomatonCegarLoop]: Abstraction has 42914 states and 77649 transitions. [2024-11-17 08:39:00,195 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-17 08:39:00,195 INFO L425 stractBuchiCegarLoop]: Abstraction has 42914 states and 77649 transitions. [2024-11-17 08:39:00,195 INFO L332 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2024-11-17 08:39:00,195 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 42914 states and 77649 transitions. [2024-11-17 08:39:00,311 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:39:00,311 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:00,311 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:00,316 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:00,317 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:00,317 INFO L745 eck$LassoCheckResult]: Stem: 875664#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 875665#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 875964#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 876057#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 876058#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 874544#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 874545#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 873243#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 873244#L1632 assume !(0 == getOrigin_~person#1); 875349#L1636 assume !(1 == getOrigin_~person#1); 875438#L1640 assume !(2 == getOrigin_~person#1); 875694#L1644 assume !(3 == getOrigin_~person#1); 873522#L1648 assume !(4 == getOrigin_~person#1); 873523#L1652 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 874752#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 874945#L813 assume !(0 == initPersonOnFloor_~floor#1); 875356#L840 assume !(1 == initPersonOnFloor_~floor#1); 874558#L867 assume !(2 == initPersonOnFloor_~floor#1); 874560#L894 assume !(3 == initPersonOnFloor_~floor#1); 873723#L921 assume !(4 == initPersonOnFloor_~floor#1); 873321#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 875987#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 872988#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 875149#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 875150#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 875793#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 875794#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 875521#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 873753#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 873754#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 876419#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 873439#L3046-1 assume !(1 == ~doorState~0); 873440#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 874047#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 874049#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 875564#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 875870#L2331-11 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 875070#L2500-11 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 874973#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 874974#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 874484#L3054-1 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 874485#L2829-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~26#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 875262#L2834-3 assume true;timeShift_#t~ret103#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 875829#L2711-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 873043#L2732-2 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 876117#L2684-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 875897#L2331-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 875899#L2500-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 873040#L2502-8 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 873041#L2702-2 assume true;timeShift_#t~ret104#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 873337#L3063-1 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 875095#L2746-5 assume !(1 == ~currentHeading~0); 875096#L2756-5 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 875751#L2762-5 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 876803#L2767-5 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 877205#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 877202#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 877200#L1769-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 877199#L1780-1 assume true; 877197#L1784-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 877198#L1785-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 874024#L2136-6 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 874025#L1789-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 883456#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 883454#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 883452#L1365 [2024-11-17 08:39:00,317 INFO L747 eck$LassoCheckResult]: Loop: 883452#L1365 assume true; 883451#L1365-1 assume !false; 883450#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 883449#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 883448#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 883447#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 883443#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 883437#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 883431#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 883421#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 883408#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 883405#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 883403#L2808 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 883402#L542-60 assume !(0 == isFloorCalling_~floorID#1); 883380#L546-60 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 883376#L560-60 assume true;stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1; 883374#L2779 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1; 883375#L2791 assume true;stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 884377#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 884360#L2955 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 884338#L2957 assume !(0 != ~persons_0~0); 884314#L2971 assume !(0 != ~persons_1~0); 884284#L2985 assume !(0 != ~persons_2~0); 884230#L2999 assume !(0 != ~persons_3~0); 884212#L3013 assume !(0 != ~persons_4~0); 884200#L3027 assume !(0 != ~persons_5~0); 884173#L3042 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~24#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 884172#L633-5 assume 0 == isPersonOnFloor_~floor#1; 884118#L634-5 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 884098#L788-5 assume true;processWaitingOnFloor_#t~ret83#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret83#1;havoc processWaitingOnFloor_#t~ret83#1; 884090#L2857 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 884011#L2868 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 884010#L633-4 assume 0 == isPersonOnFloor_~floor#1; 883982#L634-4 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 883972#L788-4 assume true;processWaitingOnFloor_#t~ret85#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret85#1;havoc processWaitingOnFloor_#t~ret85#1; 883970#L2870 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 883968#L2881 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 883966#L633-3 assume 0 == isPersonOnFloor_~floor#1; 883929#L634-3 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 883927#L788-3 assume true;processWaitingOnFloor_#t~ret87#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret87#1;havoc processWaitingOnFloor_#t~ret87#1; 883689#L2883 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 883688#L2894 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 883687#L633-2 assume 0 == isPersonOnFloor_~floor#1; 883671#L634-2 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 883647#L788-2 assume true;processWaitingOnFloor_#t~ret89#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret89#1;havoc processWaitingOnFloor_#t~ret89#1; 883643#L2896 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 883642#L2907 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 883641#L633-1 assume 0 == isPersonOnFloor_~floor#1; 883611#L634-1 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 883599#L788-1 assume true;processWaitingOnFloor_#t~ret91#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret91#1;havoc processWaitingOnFloor_#t~ret91#1; 883597#L2909 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 883595#L2920 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 883594#L633 assume 0 == isPersonOnFloor_~floor#1; 883545#L634 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 883544#L788 assume true;processWaitingOnFloor_#t~ret93#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret93#1;havoc processWaitingOnFloor_#t~ret93#1; 883542#L2922 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 883540#L2933 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 883530#L577 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 883529#L598 assume true;havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 883528#L2935 assume true;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 883523#L2098 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 883522#L2119 assume true;havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 883520#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 883519#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 883518#L1769 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 883517#L1780 assume true; 883516#L1784 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 883514#L1785 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 883515#L2136-1 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 883505#L1789 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 883496#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 883453#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 883452#L1365 [2024-11-17 08:39:00,318 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:00,318 INFO L85 PathProgramCache]: Analyzing trace with hash -907317103, now seen corresponding path program 1 times [2024-11-17 08:39:00,318 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:00,318 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [971733068] [2024-11-17 08:39:00,318 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:00,318 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:00,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:00,389 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:00,390 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:00,390 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [971733068] [2024-11-17 08:39:00,390 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [971733068] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:00,391 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:00,391 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:00,391 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [369566593] [2024-11-17 08:39:00,391 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:00,392 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:00,392 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:00,393 INFO L85 PathProgramCache]: Analyzing trace with hash 1734979992, now seen corresponding path program 6 times [2024-11-17 08:39:00,393 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:00,393 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1446492291] [2024-11-17 08:39:00,393 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:00,393 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:00,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:00,448 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:00,448 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:00,448 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1446492291] [2024-11-17 08:39:00,448 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1446492291] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:00,448 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:00,448 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:39:00,449 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2022205359] [2024-11-17 08:39:00,449 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:00,449 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:00,449 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:00,449 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-17 08:39:00,449 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-17 08:39:00,450 INFO L87 Difference]: Start difference. First operand 42914 states and 77649 transitions. cyclomatic complexity: 34738 Second operand has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:01,059 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:01,059 INFO L93 Difference]: Finished difference Result 42893 states and 77615 transitions. [2024-11-17 08:39:01,059 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 42893 states and 77615 transitions. [2024-11-17 08:39:01,252 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:39:01,373 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 42893 states to 42893 states and 77615 transitions. [2024-11-17 08:39:01,373 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 42893 [2024-11-17 08:39:01,402 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 42893 [2024-11-17 08:39:01,402 INFO L73 IsDeterministic]: Start isDeterministic. Operand 42893 states and 77615 transitions. [2024-11-17 08:39:01,428 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:01,428 INFO L218 hiAutomatonCegarLoop]: Abstraction has 42893 states and 77615 transitions. [2024-11-17 08:39:01,451 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42893 states and 77615 transitions. [2024-11-17 08:39:01,702 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42893 to 42893. [2024-11-17 08:39:01,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42893 states, 42893 states have (on average 1.8095027160608956) internal successors, (77615), 42892 states have internal predecessors, (77615), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:01,800 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42893 states to 42893 states and 77615 transitions. [2024-11-17 08:39:01,801 INFO L240 hiAutomatonCegarLoop]: Abstraction has 42893 states and 77615 transitions. [2024-11-17 08:39:01,801 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-17 08:39:01,801 INFO L425 stractBuchiCegarLoop]: Abstraction has 42893 states and 77615 transitions. [2024-11-17 08:39:01,801 INFO L332 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2024-11-17 08:39:01,801 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 42893 states and 77615 transitions. [2024-11-17 08:39:01,915 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:39:01,915 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:01,915 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:01,920 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:01,920 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:01,921 INFO L745 eck$LassoCheckResult]: Stem: 961459#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 961460#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 961761#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 961845#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 961846#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 960360#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 960361#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 959064#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 959065#L1632 assume !(0 == getOrigin_~person#1); 961155#L1636 assume !(1 == getOrigin_~person#1); 961240#L1640 assume !(2 == getOrigin_~person#1); 961492#L1644 assume !(3 == getOrigin_~person#1); 959339#L1648 assume !(4 == getOrigin_~person#1); 959340#L1652 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 960563#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 960747#L813 assume !(0 == initPersonOnFloor_~floor#1); 961162#L840 assume 1 == initPersonOnFloor_~floor#1; 958867#L841 assume !(0 == initPersonOnFloor_~person#1); 958868#L844 assume !(1 == initPersonOnFloor_~person#1); 961296#L847 assume !(2 == initPersonOnFloor_~person#1); 960763#L850 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 959568#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 961782#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 958805#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 960951#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 960952#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 961595#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 961596#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 961319#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 959569#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 959570#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 962029#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 959255#L3046-1 assume !(1 == ~doorState~0); 959256#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 959865#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 959867#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 961357#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 961668#L2331-11 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 960870#L2500-11 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 960775#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 960776#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 960300#L3054-1 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 960301#L2829-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~26#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 961069#L2834-3 assume true;timeShift_#t~ret103#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 961629#L2711-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 958862#L2732-2 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 961905#L2684-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 961694#L2331-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 961695#L2500-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 958859#L2502-8 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 958860#L2702-2 assume true;timeShift_#t~ret104#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 959155#L3063-1 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 960896#L2746-5 assume !(1 == ~currentHeading~0); 960897#L2756-5 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 961548#L2762-5 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 962454#L2767-5 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 961646#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 961647#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 966836#L1769-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 966834#L1780-1 assume true; 966832#L1784-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 966830#L1785-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 966828#L2136-6 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 966789#L1789-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 966786#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 966785#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 966783#L1365 [2024-11-17 08:39:01,922 INFO L747 eck$LassoCheckResult]: Loop: 966783#L1365 assume true; 966781#L1365-1 assume !false; 966779#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 966777#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 966775#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 966773#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 966765#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 966762#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 966753#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 966739#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 966737#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 966736#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 966734#L2808 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 966735#L542-60 assume !(0 == isFloorCalling_~floorID#1); 968434#L546-60 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 968433#L560-60 assume true;stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1; 968432#L2779 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1; 968420#L2791 assume true;stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 968439#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 968408#L2955 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 968386#L2957 assume !(0 != ~persons_0~0); 968362#L2971 assume !(0 != ~persons_1~0); 968338#L2985 assume !(0 != ~persons_2~0); 968314#L2999 assume !(0 != ~persons_3~0); 968302#L3013 assume !(0 != ~persons_4~0); 968296#L3027 assume !(0 != ~persons_5~0); 968293#L3042 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~24#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 968292#L633-5 assume 0 == isPersonOnFloor_~floor#1; 968275#L634-5 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 968251#L788-5 assume true;processWaitingOnFloor_#t~ret83#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret83#1;havoc processWaitingOnFloor_#t~ret83#1; 968247#L2857 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 968246#L2868 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 968245#L633-4 assume 0 == isPersonOnFloor_~floor#1; 967430#L634-4 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 967415#L788-4 assume true;processWaitingOnFloor_#t~ret85#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret85#1;havoc processWaitingOnFloor_#t~ret85#1; 967412#L2870 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 967404#L2881 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 967402#L633-3 assume 0 == isPersonOnFloor_~floor#1; 967366#L634-3 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 967365#L788-3 assume true;processWaitingOnFloor_#t~ret87#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret87#1;havoc processWaitingOnFloor_#t~ret87#1; 967346#L2883 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 967344#L2894 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 967342#L633-2 assume 0 == isPersonOnFloor_~floor#1; 967327#L634-2 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 967309#L788-2 assume true;processWaitingOnFloor_#t~ret89#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret89#1;havoc processWaitingOnFloor_#t~ret89#1; 967282#L2896 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 967280#L2907 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 967278#L633-1 assume 0 == isPersonOnFloor_~floor#1; 966974#L634-1 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 966962#L788-1 assume true;processWaitingOnFloor_#t~ret91#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret91#1;havoc processWaitingOnFloor_#t~ret91#1; 966960#L2909 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 966958#L2920 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 966957#L633 assume 0 == isPersonOnFloor_~floor#1; 966890#L634 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 966888#L788 assume true;processWaitingOnFloor_#t~ret93#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret93#1;havoc processWaitingOnFloor_#t~ret93#1; 966886#L2922 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 966884#L2933 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 966854#L577 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 966852#L598 assume true;havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 966850#L2935 assume true;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 966842#L2098 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 966838#L2119 assume true;havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 966835#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 966833#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 966831#L1769 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 966829#L1780 assume true; 966827#L1784 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 966824#L1785 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 966815#L2136-1 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 966806#L1789 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 966787#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 966784#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 966783#L1365 [2024-11-17 08:39:01,923 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:01,923 INFO L85 PathProgramCache]: Analyzing trace with hash 96485428, now seen corresponding path program 1 times [2024-11-17 08:39:01,923 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:01,923 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1963044728] [2024-11-17 08:39:01,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:01,923 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:01,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:02,247 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:02,247 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:02,247 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1963044728] [2024-11-17 08:39:02,247 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1963044728] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:02,247 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:02,247 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:02,248 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1905718765] [2024-11-17 08:39:02,248 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:02,248 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:02,248 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:02,248 INFO L85 PathProgramCache]: Analyzing trace with hash 1734979992, now seen corresponding path program 7 times [2024-11-17 08:39:02,249 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:02,249 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [744958121] [2024-11-17 08:39:02,249 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:02,249 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:02,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:02,323 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:02,323 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:02,323 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [744958121] [2024-11-17 08:39:02,324 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [744958121] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:02,324 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:02,324 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-17 08:39:02,324 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1642010981] [2024-11-17 08:39:02,324 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:02,324 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:02,325 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:02,325 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-17 08:39:02,325 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-17 08:39:02,325 INFO L87 Difference]: Start difference. First operand 42893 states and 77615 transitions. cyclomatic complexity: 34725 Second operand has 4 states, 4 states have (on average 16.5) internal successors, (66), 4 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:02,494 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:02,494 INFO L93 Difference]: Finished difference Result 42893 states and 77614 transitions. [2024-11-17 08:39:02,494 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 42893 states and 77614 transitions. [2024-11-17 08:39:02,653 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:39:02,768 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 42893 states to 42893 states and 77614 transitions. [2024-11-17 08:39:02,768 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 42893 [2024-11-17 08:39:02,802 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 42893 [2024-11-17 08:39:02,803 INFO L73 IsDeterministic]: Start isDeterministic. Operand 42893 states and 77614 transitions. [2024-11-17 08:39:02,828 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:02,828 INFO L218 hiAutomatonCegarLoop]: Abstraction has 42893 states and 77614 transitions. [2024-11-17 08:39:02,853 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42893 states and 77614 transitions. [2024-11-17 08:39:03,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42893 to 42893. [2024-11-17 08:39:03,139 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42893 states, 42893 states have (on average 1.8094794022334646) internal successors, (77614), 42892 states have internal predecessors, (77614), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:03,653 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42893 states to 42893 states and 77614 transitions. [2024-11-17 08:39:03,654 INFO L240 hiAutomatonCegarLoop]: Abstraction has 42893 states and 77614 transitions. [2024-11-17 08:39:03,654 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-17 08:39:03,655 INFO L425 stractBuchiCegarLoop]: Abstraction has 42893 states and 77614 transitions. [2024-11-17 08:39:03,655 INFO L332 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2024-11-17 08:39:03,655 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 42893 states and 77614 transitions. [2024-11-17 08:39:03,766 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:39:03,767 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:03,767 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:03,771 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:03,771 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:03,772 INFO L745 eck$LassoCheckResult]: Stem: 1047238#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1047239#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1047522#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1047607#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1047608#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1046149#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1046150#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1044860#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1044861#L1632 assume !(0 == getOrigin_~person#1); 1046933#L1636 assume !(1 == getOrigin_~person#1); 1047020#L1640 assume !(2 == getOrigin_~person#1); 1047266#L1644 assume !(3 == getOrigin_~person#1); 1045133#L1648 assume !(4 == getOrigin_~person#1); 1045134#L1652 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1046345#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1046529#L813 assume !(0 == initPersonOnFloor_~floor#1); 1046940#L840 assume 1 == initPersonOnFloor_~floor#1; 1044662#L841 assume !(0 == initPersonOnFloor_~person#1); 1044663#L844 assume !(1 == initPersonOnFloor_~person#1); 1047077#L847 assume !(2 == initPersonOnFloor_~person#1); 1046547#L850 assume !(3 == initPersonOnFloor_~person#1); 1046238#L853 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 1045362#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1047543#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1044603#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1046733#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1046734#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 1047362#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1047363#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1047100#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1045359#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1045360#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 1047830#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 1045050#L3046-1 assume !(1 == ~doorState~0); 1045051#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1045657#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1045659#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 1047139#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1047433#L2331-11 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1046654#L2500-11 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1046559#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1046560#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 1046086#L3054-1 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 1046087#L2829-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~26#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 1046846#L2834-3 assume true;timeShift_#t~ret103#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1047398#L2711-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1044659#L2732-2 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 1047670#L2684-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1047458#L2331-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1047459#L2500-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1044656#L2502-8 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1044657#L2702-2 assume true;timeShift_#t~ret104#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 1044950#L3063-1 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1046676#L2746-5 assume !(1 == ~currentHeading~0); 1046677#L2756-5 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1047317#L2762-5 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1048263#L2767-5 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1052550#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1052546#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 1052545#L1769-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1052544#L1780-1 assume true; 1052538#L1784-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1052539#L1785-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1052540#L2136-6 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 1052515#L1789-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 1052513#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1052512#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1052510#L1365 [2024-11-17 08:39:03,772 INFO L747 eck$LassoCheckResult]: Loop: 1052510#L1365 assume true; 1052509#L1365-1 assume !false; 1052504#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1052502#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1052501#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1052500#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1052491#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1052489#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 1052484#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1052474#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1052473#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1052468#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 1052465#L2808 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1052466#L542-60 assume !(0 == isFloorCalling_~floorID#1); 1052469#L546-60 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1052467#L560-60 assume true;stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1; 1052463#L2779 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1; 1052464#L2791 assume true;stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1053872#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 1053851#L2955 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1053829#L2957 assume !(0 != ~persons_0~0); 1053805#L2971 assume !(0 != ~persons_1~0); 1053781#L2985 assume !(0 != ~persons_2~0); 1053762#L2999 assume !(0 != ~persons_3~0); 1053751#L3013 assume !(0 != ~persons_4~0); 1053745#L3027 assume !(0 != ~persons_5~0); 1053742#L3042 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~24#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1053741#L633-5 assume 0 == isPersonOnFloor_~floor#1; 1053712#L634-5 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1053688#L788-5 assume true;processWaitingOnFloor_#t~ret83#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret83#1;havoc processWaitingOnFloor_#t~ret83#1; 1053684#L2857 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1053683#L2868 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1053682#L633-4 assume 0 == isPersonOnFloor_~floor#1; 1053650#L634-4 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1053639#L788-4 assume true;processWaitingOnFloor_#t~ret85#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret85#1;havoc processWaitingOnFloor_#t~ret85#1; 1053637#L2870 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 1053635#L2881 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1053634#L633-3 assume 0 == isPersonOnFloor_~floor#1; 1053564#L634-3 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1053557#L788-3 assume true;processWaitingOnFloor_#t~ret87#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret87#1;havoc processWaitingOnFloor_#t~ret87#1; 1053553#L2883 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 1053552#L2894 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1053551#L633-2 assume 0 == isPersonOnFloor_~floor#1; 1053535#L634-2 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1053511#L788-2 assume true;processWaitingOnFloor_#t~ret89#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret89#1;havoc processWaitingOnFloor_#t~ret89#1; 1053507#L2896 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1053506#L2907 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1053505#L633-1 assume 0 == isPersonOnFloor_~floor#1; 1053407#L634-1 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1053395#L788-1 assume true;processWaitingOnFloor_#t~ret91#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret91#1;havoc processWaitingOnFloor_#t~ret91#1; 1053393#L2909 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1053391#L2920 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1053390#L633 assume 0 == isPersonOnFloor_~floor#1; 1053355#L634 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1053354#L788 assume true;processWaitingOnFloor_#t~ret93#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret93#1;havoc processWaitingOnFloor_#t~ret93#1; 1053352#L2922 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1053350#L2933 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1053344#L577 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1053341#L598 assume true;havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 1053339#L2935 assume true;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1053334#L2098 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1052560#L2119 assume true;havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 1052558#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1052557#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 1052556#L1769 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1052555#L1780 assume true; 1052554#L1784 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1052552#L1785 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1052553#L2136-1 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 1052534#L1789 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 1052524#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1052511#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1052510#L1365 [2024-11-17 08:39:03,773 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:03,773 INFO L85 PathProgramCache]: Analyzing trace with hash -1004109059, now seen corresponding path program 1 times [2024-11-17 08:39:03,773 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:03,773 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [473578963] [2024-11-17 08:39:03,773 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:03,774 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:03,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:03,858 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:03,859 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:03,859 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [473578963] [2024-11-17 08:39:03,859 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [473578963] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:03,859 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:03,859 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:03,860 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1244986905] [2024-11-17 08:39:03,860 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:03,860 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:03,860 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:03,861 INFO L85 PathProgramCache]: Analyzing trace with hash 1734979992, now seen corresponding path program 8 times [2024-11-17 08:39:03,861 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:03,861 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [678710392] [2024-11-17 08:39:03,861 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:03,861 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:03,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:03,949 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:03,950 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:03,950 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [678710392] [2024-11-17 08:39:03,950 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [678710392] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:03,950 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:03,950 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-17 08:39:03,951 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [165033711] [2024-11-17 08:39:03,951 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:03,951 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:03,951 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:03,952 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-17 08:39:03,952 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-17 08:39:03,952 INFO L87 Difference]: Start difference. First operand 42893 states and 77614 transitions. cyclomatic complexity: 34724 Second operand has 4 states, 4 states have (on average 16.75) internal successors, (67), 4 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:04,177 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:04,178 INFO L93 Difference]: Finished difference Result 42893 states and 77613 transitions. [2024-11-17 08:39:04,178 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 42893 states and 77613 transitions. [2024-11-17 08:39:04,366 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:39:04,499 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 42893 states to 42893 states and 77613 transitions. [2024-11-17 08:39:04,499 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 42893 [2024-11-17 08:39:04,537 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 42893 [2024-11-17 08:39:04,537 INFO L73 IsDeterministic]: Start isDeterministic. Operand 42893 states and 77613 transitions. [2024-11-17 08:39:04,571 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:04,571 INFO L218 hiAutomatonCegarLoop]: Abstraction has 42893 states and 77613 transitions. [2024-11-17 08:39:04,600 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42893 states and 77613 transitions. [2024-11-17 08:39:05,419 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42893 to 42893. [2024-11-17 08:39:05,484 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42893 states, 42893 states have (on average 1.8094560884060336) internal successors, (77613), 42892 states have internal predecessors, (77613), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:05,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42893 states to 42893 states and 77613 transitions. [2024-11-17 08:39:05,593 INFO L240 hiAutomatonCegarLoop]: Abstraction has 42893 states and 77613 transitions. [2024-11-17 08:39:05,594 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-17 08:39:05,594 INFO L425 stractBuchiCegarLoop]: Abstraction has 42893 states and 77613 transitions. [2024-11-17 08:39:05,594 INFO L332 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2024-11-17 08:39:05,594 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 42893 states and 77613 transitions. [2024-11-17 08:39:05,708 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:39:05,708 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:05,708 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:05,713 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:05,713 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:05,713 INFO L745 eck$LassoCheckResult]: Stem: 1133056#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1133057#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1133349#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1133440#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1133441#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1131946#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1131947#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1130657#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1130658#L1632 assume !(0 == getOrigin_~person#1); 1132741#L1636 assume !(1 == getOrigin_~person#1); 1132829#L1640 assume !(2 == getOrigin_~person#1); 1133086#L1644 assume !(3 == getOrigin_~person#1); 1130933#L1648 assume !(4 == getOrigin_~person#1); 1130934#L1652 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1132146#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1132330#L813 assume !(0 == initPersonOnFloor_~floor#1); 1132748#L840 assume 1 == initPersonOnFloor_~floor#1; 1130459#L841 assume !(0 == initPersonOnFloor_~person#1); 1130460#L844 assume !(1 == initPersonOnFloor_~person#1); 1132885#L847 assume !(2 == initPersonOnFloor_~person#1); 1132345#L850 assume !(3 == initPersonOnFloor_~person#1); 1132040#L853 assume !(4 == initPersonOnFloor_~person#1); 1131160#L856 assume !(5 == initPersonOnFloor_~person#1); 1131161#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1133373#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1130400#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1132530#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1132531#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 1133186#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1133187#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1132908#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1131162#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1131163#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 1133626#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 1130847#L3046-1 assume !(1 == ~doorState~0); 1130848#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1131456#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1131458#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 1132951#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1133260#L2331-11 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1132450#L2500-11 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1132357#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1132358#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 1131885#L3054-1 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 1131886#L2829-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~26#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 1132655#L2834-3 assume true;timeShift_#t~ret103#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1133225#L2711-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1130456#L2732-2 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 1133499#L2684-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1133285#L2331-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1133286#L2500-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1130453#L2502-8 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1130454#L2702-2 assume true;timeShift_#t~ret104#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 1130747#L3063-1 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1132476#L2746-5 assume !(1 == ~currentHeading~0); 1132477#L2756-5 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1133142#L2762-5 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1134005#L2767-5 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1157490#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1133308#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 1133309#L1769-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1133460#L1780-1 assume true; 1155858#L1784-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1155859#L1785-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1155860#L2136-6 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 1155785#L1789-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 1155783#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1155782#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1155780#L1365 [2024-11-17 08:39:05,713 INFO L747 eck$LassoCheckResult]: Loop: 1155780#L1365 assume true; 1155779#L1365-1 assume !false; 1155774#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1155772#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1155771#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1155770#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1155761#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1155759#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 1155754#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1155733#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1155732#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1155731#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 1155729#L2808 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1155727#L542-60 assume !(0 == isFloorCalling_~floorID#1); 1155723#L546-60 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1155722#L560-60 assume true;stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1; 1155720#L2779 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1; 1138620#L2791 assume true;stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1159525#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 1159524#L2955 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1133623#L2957 assume !(0 != ~persons_0~0); 1159491#L2971 assume !(0 != ~persons_1~0); 1159461#L2985 assume !(0 != ~persons_2~0); 1159455#L2999 assume !(0 != ~persons_3~0); 1159425#L3013 assume !(0 != ~persons_4~0); 1159419#L3027 assume !(0 != ~persons_5~0); 1159416#L3042 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~24#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1159415#L633-5 assume 0 == isPersonOnFloor_~floor#1; 1159311#L634-5 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1159287#L788-5 assume true;processWaitingOnFloor_#t~ret83#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret83#1;havoc processWaitingOnFloor_#t~ret83#1; 1159283#L2857 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1159282#L2868 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1159281#L633-4 assume 0 == isPersonOnFloor_~floor#1; 1159248#L634-4 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1159237#L788-4 assume true;processWaitingOnFloor_#t~ret85#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret85#1;havoc processWaitingOnFloor_#t~ret85#1; 1159235#L2870 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 1159233#L2881 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1159232#L633-3 assume 0 == isPersonOnFloor_~floor#1; 1159197#L634-3 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1159190#L788-3 assume true;processWaitingOnFloor_#t~ret87#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret87#1;havoc processWaitingOnFloor_#t~ret87#1; 1159186#L2883 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 1159113#L2894 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1156668#L633-2 assume 0 == isPersonOnFloor_~floor#1; 1156443#L634-2 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1156108#L788-2 assume true;processWaitingOnFloor_#t~ret89#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret89#1;havoc processWaitingOnFloor_#t~ret89#1; 1156105#L2896 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1156103#L2907 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1156069#L633-1 assume 0 == isPersonOnFloor_~floor#1; 1155942#L634-1 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1155925#L788-1 assume true;processWaitingOnFloor_#t~ret91#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret91#1;havoc processWaitingOnFloor_#t~ret91#1; 1155922#L2909 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1155920#L2920 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1155919#L633 assume 0 == isPersonOnFloor_~floor#1; 1155873#L634 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1155871#L788 assume true;processWaitingOnFloor_#t~ret93#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret93#1;havoc processWaitingOnFloor_#t~ret93#1; 1155869#L2922 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1155867#L2933 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1155862#L577 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1155861#L598 assume true;havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 1155857#L2935 assume true;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1155848#L2098 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1155847#L2119 assume true;havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 1130371#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1155846#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 1155845#L1769 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1155844#L1780 assume true; 1155843#L1784 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1155841#L1785 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1155842#L2136-1 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 1155804#L1789 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 1155794#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1155781#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1155780#L1365 [2024-11-17 08:39:05,714 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:05,714 INFO L85 PathProgramCache]: Analyzing trace with hash 1518561296, now seen corresponding path program 1 times [2024-11-17 08:39:05,714 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:05,714 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [807669362] [2024-11-17 08:39:05,714 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:05,714 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:05,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:05,788 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:05,788 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:05,788 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [807669362] [2024-11-17 08:39:05,789 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [807669362] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:05,789 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:05,789 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:39:05,789 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [779615599] [2024-11-17 08:39:05,789 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:05,789 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:05,790 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:05,790 INFO L85 PathProgramCache]: Analyzing trace with hash 1734979992, now seen corresponding path program 9 times [2024-11-17 08:39:05,790 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:05,790 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [292127038] [2024-11-17 08:39:05,790 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:05,790 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:05,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:05,851 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:05,852 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:05,852 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [292127038] [2024-11-17 08:39:05,852 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [292127038] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:05,852 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:05,852 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:39:05,852 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [295389504] [2024-11-17 08:39:05,852 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:05,853 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:05,853 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:05,853 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-17 08:39:05,853 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-17 08:39:05,853 INFO L87 Difference]: Start difference. First operand 42893 states and 77613 transitions. cyclomatic complexity: 34723 Second operand has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:06,011 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:06,012 INFO L93 Difference]: Finished difference Result 42893 states and 77612 transitions. [2024-11-17 08:39:06,012 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 42893 states and 77612 transitions. [2024-11-17 08:39:06,176 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:39:06,288 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 42893 states to 42893 states and 77612 transitions. [2024-11-17 08:39:06,288 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 42893 [2024-11-17 08:39:06,321 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 42893 [2024-11-17 08:39:06,321 INFO L73 IsDeterministic]: Start isDeterministic. Operand 42893 states and 77612 transitions. [2024-11-17 08:39:06,350 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:06,350 INFO L218 hiAutomatonCegarLoop]: Abstraction has 42893 states and 77612 transitions. [2024-11-17 08:39:06,374 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42893 states and 77612 transitions. [2024-11-17 08:39:07,219 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42893 to 42893. [2024-11-17 08:39:07,297 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42893 states, 42893 states have (on average 1.8094327745786025) internal successors, (77612), 42892 states have internal predecessors, (77612), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:07,381 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42893 states to 42893 states and 77612 transitions. [2024-11-17 08:39:07,381 INFO L240 hiAutomatonCegarLoop]: Abstraction has 42893 states and 77612 transitions. [2024-11-17 08:39:07,381 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-17 08:39:07,381 INFO L425 stractBuchiCegarLoop]: Abstraction has 42893 states and 77612 transitions. [2024-11-17 08:39:07,382 INFO L332 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2024-11-17 08:39:07,382 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 42893 states and 77612 transitions. [2024-11-17 08:39:07,499 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:39:07,499 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:07,499 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:07,505 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:07,505 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:07,505 INFO L745 eck$LassoCheckResult]: Stem: 1218857#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1218858#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1219152#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1219233#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1219234#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1217752#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1217753#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1216451#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1216452#L1632 assume !(0 == getOrigin_~person#1); 1218545#L1636 assume !(1 == getOrigin_~person#1); 1218633#L1640 assume !(2 == getOrigin_~person#1); 1218886#L1644 assume !(3 == getOrigin_~person#1); 1216729#L1648 assume !(4 == getOrigin_~person#1); 1216730#L1652 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1217951#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1218134#L813 assume !(0 == initPersonOnFloor_~floor#1); 1218552#L840 assume 1 == initPersonOnFloor_~floor#1; 1216255#L841 assume !(0 == initPersonOnFloor_~person#1); 1216256#L844 assume !(1 == initPersonOnFloor_~person#1); 1218690#L847 assume !(2 == initPersonOnFloor_~person#1); 1218151#L850 assume !(3 == initPersonOnFloor_~person#1); 1217845#L853 assume !(4 == initPersonOnFloor_~person#1); 1216956#L856 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1216957#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1219175#L605 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1216194#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1218339#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1218340#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 1218983#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1218984#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1218710#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1216958#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1216959#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 1219427#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 1216643#L3046-1 assume !(1 == ~doorState~0); 1216644#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1217255#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1217257#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 1218751#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1219057#L2331-11 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1218260#L2500-11 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1218164#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1218165#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 1217691#L3054-1 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 1217692#L2829-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~26#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 1218459#L2834-3 assume true;timeShift_#t~ret103#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1219019#L2711-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1216250#L2732-2 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 1219298#L2684-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1219084#L2331-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1219085#L2500-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1216247#L2502-8 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1216248#L2702-2 assume true;timeShift_#t~ret104#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 1216543#L3063-1 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1218284#L2746-5 assume !(1 == ~currentHeading~0); 1218285#L2756-5 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1218941#L2762-5 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1215946#L2767-5 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1215947#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1229613#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 1229611#L1769-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1229609#L1780-1 assume true; 1229603#L1784-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1229604#L1785-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1229605#L2136-6 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 1229572#L1789-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 1229569#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1229568#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1229566#L1365 [2024-11-17 08:39:07,506 INFO L747 eck$LassoCheckResult]: Loop: 1229566#L1365 assume true; 1229565#L1365-1 assume !false; 1229564#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1229563#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1229558#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1229557#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1229553#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1229538#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 1229530#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1229520#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1229519#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1229518#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 1229516#L2808 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1229514#L542-60 assume !(0 == isFloorCalling_~floorID#1); 1229510#L546-60 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1229509#L560-60 assume true;stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1; 1229508#L2779 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1; 1222185#L2791 assume true;stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1231817#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 1231816#L2955 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1219424#L2957 assume !(0 != ~persons_0~0); 1231783#L2971 assume !(0 != ~persons_1~0); 1231753#L2985 assume !(0 != ~persons_2~0); 1231747#L2999 assume !(0 != ~persons_3~0); 1231717#L3013 assume !(0 != ~persons_4~0); 1231711#L3027 assume !(0 != ~persons_5~0); 1231708#L3042 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~24#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1231707#L633-5 assume 0 == isPersonOnFloor_~floor#1; 1231678#L634-5 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1231654#L788-5 assume true;processWaitingOnFloor_#t~ret83#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret83#1;havoc processWaitingOnFloor_#t~ret83#1; 1231650#L2857 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1231649#L2868 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1231648#L633-4 assume 0 == isPersonOnFloor_~floor#1; 1231552#L634-4 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1231541#L788-4 assume true;processWaitingOnFloor_#t~ret85#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret85#1;havoc processWaitingOnFloor_#t~ret85#1; 1231539#L2870 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 1231537#L2881 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1231535#L633-3 assume 0 == isPersonOnFloor_~floor#1; 1231478#L634-3 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1231469#L788-3 assume true;processWaitingOnFloor_#t~ret87#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret87#1;havoc processWaitingOnFloor_#t~ret87#1; 1231445#L2883 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 1231439#L2894 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1231431#L633-2 assume 0 == isPersonOnFloor_~floor#1; 1231297#L634-2 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1231278#L788-2 assume true;processWaitingOnFloor_#t~ret89#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret89#1;havoc processWaitingOnFloor_#t~ret89#1; 1231271#L2896 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1231270#L2907 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1231268#L633-1 assume 0 == isPersonOnFloor_~floor#1; 1231239#L634-1 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1231228#L788-1 assume true;processWaitingOnFloor_#t~ret91#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret91#1;havoc processWaitingOnFloor_#t~ret91#1; 1231188#L2909 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1231186#L2920 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1229802#L633 assume 0 == isPersonOnFloor_~floor#1; 1229679#L634 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1229677#L788 assume true;processWaitingOnFloor_#t~ret93#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret93#1;havoc processWaitingOnFloor_#t~ret93#1; 1229675#L2922 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1229673#L2933 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1229668#L577 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1229667#L598 assume true;havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 1229666#L2935 assume true;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1229622#L2098 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1229617#L2119 assume true;havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 1229615#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1229614#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 1229612#L1769 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1229610#L1780 assume true; 1229608#L1784 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1229606#L1785 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1229607#L2136-1 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 1229589#L1789 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 1229570#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1229567#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1229566#L1365 [2024-11-17 08:39:07,506 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:07,506 INFO L85 PathProgramCache]: Analyzing trace with hash -1593058703, now seen corresponding path program 1 times [2024-11-17 08:39:07,507 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:07,507 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1538338552] [2024-11-17 08:39:07,507 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:07,507 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:07,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:07,637 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:07,638 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:07,638 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1538338552] [2024-11-17 08:39:07,638 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1538338552] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:07,638 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:07,638 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-17 08:39:07,638 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [132896811] [2024-11-17 08:39:07,639 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:07,639 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:07,639 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:07,639 INFO L85 PathProgramCache]: Analyzing trace with hash 1734979992, now seen corresponding path program 10 times [2024-11-17 08:39:07,639 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:07,639 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1022915795] [2024-11-17 08:39:07,640 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:07,640 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:07,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:07,715 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:07,715 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:07,716 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1022915795] [2024-11-17 08:39:07,716 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1022915795] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:07,716 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:07,716 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-17 08:39:07,716 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [944391313] [2024-11-17 08:39:07,716 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:07,716 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:07,717 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:07,717 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-17 08:39:07,717 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-17 08:39:07,717 INFO L87 Difference]: Start difference. First operand 42893 states and 77612 transitions. cyclomatic complexity: 34722 Second operand has 7 states, 7 states have (on average 9.714285714285714) internal successors, (68), 7 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:07,954 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:07,955 INFO L93 Difference]: Finished difference Result 42893 states and 77611 transitions. [2024-11-17 08:39:07,955 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 42893 states and 77611 transitions. [2024-11-17 08:39:08,130 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:39:08,248 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 42893 states to 42893 states and 77611 transitions. [2024-11-17 08:39:08,248 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 42893 [2024-11-17 08:39:08,282 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 42893 [2024-11-17 08:39:08,282 INFO L73 IsDeterministic]: Start isDeterministic. Operand 42893 states and 77611 transitions. [2024-11-17 08:39:08,309 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:08,309 INFO L218 hiAutomatonCegarLoop]: Abstraction has 42893 states and 77611 transitions. [2024-11-17 08:39:08,334 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42893 states and 77611 transitions. [2024-11-17 08:39:09,096 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42893 to 42893. [2024-11-17 08:39:09,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42893 states, 42893 states have (on average 1.8094094607511715) internal successors, (77611), 42892 states have internal predecessors, (77611), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:09,199 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42893 states to 42893 states and 77611 transitions. [2024-11-17 08:39:09,199 INFO L240 hiAutomatonCegarLoop]: Abstraction has 42893 states and 77611 transitions. [2024-11-17 08:39:09,200 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-17 08:39:09,200 INFO L425 stractBuchiCegarLoop]: Abstraction has 42893 states and 77611 transitions. [2024-11-17 08:39:09,200 INFO L332 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2024-11-17 08:39:09,200 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 42893 states and 77611 transitions. [2024-11-17 08:39:09,317 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41264 [2024-11-17 08:39:09,317 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:09,317 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:09,323 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:09,323 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:09,324 INFO L745 eck$LassoCheckResult]: Stem: 1304648#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1304649#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1304933#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1305026#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1305027#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1303544#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1303545#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1302256#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1302257#L1632 assume !(0 == getOrigin_~person#1); 1304332#L1636 assume !(1 == getOrigin_~person#1); 1304419#L1640 assume !(2 == getOrigin_~person#1); 1304676#L1644 assume !(3 == getOrigin_~person#1); 1302530#L1648 assume !(4 == getOrigin_~person#1); 1302531#L1652 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1303743#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1303927#L813 assume !(0 == initPersonOnFloor_~floor#1); 1304339#L840 assume 1 == initPersonOnFloor_~floor#1; 1302056#L841 assume !(0 == initPersonOnFloor_~person#1); 1302057#L844 assume !(1 == initPersonOnFloor_~person#1); 1304477#L847 assume !(2 == initPersonOnFloor_~person#1); 1303944#L850 assume !(3 == initPersonOnFloor_~person#1); 1303638#L853 assume !(4 == initPersonOnFloor_~person#1); 1302755#L856 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1302756#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1304955#L605 assume !(0 == callOnFloor_~floorID#1); 1304954#L608 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1301997#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1304131#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1304132#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 1304771#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1304772#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1304499#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1302753#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1302754#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 1305261#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 1302447#L3046-1 assume !(1 == ~doorState~0); 1302448#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1303049#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1303051#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 1304543#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1304845#L2331-11 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1304052#L2500-11 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1303955#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1303956#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 1303485#L3054-1 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 1303486#L2829-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~26#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 1304247#L2834-3 assume true;timeShift_#t~ret103#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1304808#L2711-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1302053#L2732-2 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 1305100#L2684-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1304869#L2331-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1304870#L2500-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1302050#L2502-8 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1302051#L2702-2 assume true;timeShift_#t~ret104#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 1302347#L3063-1 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1304074#L2746-5 assume !(1 == ~currentHeading~0); 1304075#L2756-5 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1304727#L2762-5 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1305692#L2767-5 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1311865#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1311864#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 1311863#L1769-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1311862#L1780-1 assume true; 1311859#L1784-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1311860#L1785-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1311861#L2136-6 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 1311844#L1789-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 1311838#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1311836#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1311834#L1365 [2024-11-17 08:39:09,324 INFO L747 eck$LassoCheckResult]: Loop: 1311834#L1365 assume true; 1311833#L1365-1 assume !false; 1311832#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1311831#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1311830#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1311829#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1311825#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1311819#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 1311812#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1311801#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1311799#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1311797#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 1311795#L2808 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1311791#L542-60 assume !(0 == isFloorCalling_~floorID#1); 1311787#L546-60 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1311786#L560-60 assume true;stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1; 1311784#L2779 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1; 1311785#L2791 assume true;stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1316268#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 1316267#L2955 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1316238#L2957 assume !(0 != ~persons_0~0); 1316232#L2971 assume !(0 != ~persons_1~0); 1316202#L2985 assume !(0 != ~persons_2~0); 1316196#L2999 assume !(0 != ~persons_3~0); 1316166#L3013 assume !(0 != ~persons_4~0); 1316160#L3027 assume !(0 != ~persons_5~0); 1316157#L3042 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~24#1;havoc processWaitingOnFloor_~tmp___0~9#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1316156#L633-5 assume 0 == isPersonOnFloor_~floor#1; 1312359#L634-5 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1312335#L788-5 assume true;processWaitingOnFloor_#t~ret83#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~9#1 := processWaitingOnFloor_#t~ret83#1;havoc processWaitingOnFloor_#t~ret83#1; 1312331#L2857 assume !(0 != processWaitingOnFloor_~tmp___0~9#1); 1312330#L2868 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1312329#L633-4 assume 0 == isPersonOnFloor_~floor#1; 1312298#L634-4 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1312287#L788-4 assume true;processWaitingOnFloor_#t~ret85#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret85#1;havoc processWaitingOnFloor_#t~ret85#1; 1312285#L2870 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 1312283#L2881 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1312282#L633-3 assume 0 == isPersonOnFloor_~floor#1; 1312220#L634-3 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1312219#L788-3 assume true;processWaitingOnFloor_#t~ret87#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret87#1;havoc processWaitingOnFloor_#t~ret87#1; 1312216#L2883 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 1312209#L2894 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1312208#L633-2 assume 0 == isPersonOnFloor_~floor#1; 1312192#L634-2 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1312168#L788-2 assume true;processWaitingOnFloor_#t~ret89#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret89#1;havoc processWaitingOnFloor_#t~ret89#1; 1312164#L2896 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1312163#L2907 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1312162#L633-1 assume 0 == isPersonOnFloor_~floor#1; 1312125#L634-1 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1312114#L788-1 assume true;processWaitingOnFloor_#t~ret91#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret91#1;havoc processWaitingOnFloor_#t~ret91#1; 1312106#L2909 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1312103#L2920 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 1312102#L633 assume 0 == isPersonOnFloor_~floor#1; 1312038#L634 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 1312036#L788 assume true;processWaitingOnFloor_#t~ret93#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret93#1;havoc processWaitingOnFloor_#t~ret93#1; 1312034#L2922 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1312032#L2933 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1312027#L577 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1312026#L598 assume true;havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 1312025#L2935 assume true;havoc processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~24#1, processWaitingOnFloor_~tmp___0~9#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1312020#L2098 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1311889#L2119 assume true;havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 1311887#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1311886#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 1311884#L1769 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1311882#L1780 assume true; 1311880#L1784 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1311879#L1785 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1311878#L2136-1 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 1311876#L1789 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 1311867#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1311835#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1311834#L1365 [2024-11-17 08:39:09,325 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:09,325 INFO L85 PathProgramCache]: Analyzing trace with hash 507949162, now seen corresponding path program 1 times [2024-11-17 08:39:09,325 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:09,325 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1306315882] [2024-11-17 08:39:09,325 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:09,325 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:09,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:09,372 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:09,373 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:09,373 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1306315882] [2024-11-17 08:39:09,373 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1306315882] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:09,373 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:09,373 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-17 08:39:09,373 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1714328776] [2024-11-17 08:39:09,373 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:09,374 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:09,374 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:09,374 INFO L85 PathProgramCache]: Analyzing trace with hash 1734979992, now seen corresponding path program 11 times [2024-11-17 08:39:09,374 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:09,374 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [777952613] [2024-11-17 08:39:09,374 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:09,375 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:09,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:09,447 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:09,447 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:09,448 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [777952613] [2024-11-17 08:39:09,448 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [777952613] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:09,448 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:09,448 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-17 08:39:09,448 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [775549890] [2024-11-17 08:39:09,448 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:09,448 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:09,448 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:09,449 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-17 08:39:09,449 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-17 08:39:09,449 INFO L87 Difference]: Start difference. First operand 42893 states and 77611 transitions. cyclomatic complexity: 34721 Second operand has 3 states, 3 states have (on average 23.0) internal successors, (69), 2 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:09,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:09,630 INFO L93 Difference]: Finished difference Result 43543 states and 78570 transitions. [2024-11-17 08:39:09,630 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 43543 states and 78570 transitions. [2024-11-17 08:39:09,791 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41893 [2024-11-17 08:39:09,909 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 43543 states to 43543 states and 78570 transitions. [2024-11-17 08:39:09,909 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 43543 [2024-11-17 08:39:09,942 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 43543 [2024-11-17 08:39:09,942 INFO L73 IsDeterministic]: Start isDeterministic. Operand 43543 states and 78570 transitions. [2024-11-17 08:39:09,972 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:09,972 INFO L218 hiAutomatonCegarLoop]: Abstraction has 43543 states and 78570 transitions. [2024-11-17 08:39:09,997 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43543 states and 78570 transitions. [2024-11-17 08:39:10,878 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43543 to 43438. [2024-11-17 08:39:10,915 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43438 states, 43438 states have (on average 1.8061144619918044) internal successors, (78454), 43437 states have internal predecessors, (78454), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:10,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43438 states to 43438 states and 78454 transitions. [2024-11-17 08:39:10,996 INFO L240 hiAutomatonCegarLoop]: Abstraction has 43438 states and 78454 transitions. [2024-11-17 08:39:10,996 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-17 08:39:10,997 INFO L425 stractBuchiCegarLoop]: Abstraction has 43438 states and 78454 transitions. [2024-11-17 08:39:10,997 INFO L332 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2024-11-17 08:39:10,997 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 43438 states and 78454 transitions. [2024-11-17 08:39:11,134 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 41809 [2024-11-17 08:39:11,134 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:11,134 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:11,146 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:11,146 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:11,146 INFO L745 eck$LassoCheckResult]: Stem: 1391091#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1391092#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1391375#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1391464#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1391465#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1389999#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1390000#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1388701#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1388702#L1632 assume !(0 == getOrigin_~person#1); 1390784#L1636 assume !(1 == getOrigin_~person#1); 1390874#L1640 assume !(2 == getOrigin_~person#1); 1391117#L1644 assume !(3 == getOrigin_~person#1); 1388976#L1648 assume !(4 == getOrigin_~person#1); 1388977#L1652 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1390200#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1390387#L813 assume !(0 == initPersonOnFloor_~floor#1); 1390791#L840 assume 1 == initPersonOnFloor_~floor#1; 1388503#L841 assume !(0 == initPersonOnFloor_~person#1); 1388504#L844 assume !(1 == initPersonOnFloor_~person#1); 1390930#L847 assume !(2 == initPersonOnFloor_~person#1); 1390402#L850 assume !(3 == initPersonOnFloor_~person#1); 1390093#L853 assume !(4 == initPersonOnFloor_~person#1); 1389205#L856 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1389206#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1391399#L605 assume !(0 == callOnFloor_~floorID#1); 1391398#L608 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1388444#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1390586#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1390587#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 1391217#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1391218#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1390951#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1389203#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1389204#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 1391658#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 1388892#L3046-1 assume 1 == ~doorState~0;~doorState~0 := 0; 1388893#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1389499#L2711-3 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1389501#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 1390993#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1391286#L2331-11 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1390508#L2500-11 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1390414#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1390415#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 1389940#L3054-1 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 1389941#L2829-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~26#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 1390696#L2834-3 assume true;timeShift_#t~ret103#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1391251#L2711-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1388500#L2732-2 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 1391528#L2684-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1391315#L2331-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1391316#L2500-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1388497#L2502-8 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1388498#L2702-2 assume true;timeShift_#t~ret104#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 1388792#L3063-1 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1390530#L2746-5 assume !(1 == ~currentHeading~0); 1390531#L2756-5 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1391172#L2762-5 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1388195#L2767-5 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1388196#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1391338#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 1391339#L1769-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1392697#L1780-1 assume true; 1392695#L1784-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1392691#L1785-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1392688#L2136-6 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 1392679#L1789-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 1392677#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1392676#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1392674#L1365 [2024-11-17 08:39:11,147 INFO L747 eck$LassoCheckResult]: Loop: 1392674#L1365 assume true; 1392669#L1365-1 assume !false; 1392666#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1392660#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1392658#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1392657#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1392653#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1392651#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 1392594#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1392582#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1392580#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1392578#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 1392572#L2808 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1392570#L2127-1 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1392566#L2144 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1392567#L2148 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1398697#L2165 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1398912#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 1397834#L2955 assume !(0 != timeShift_~tmp___9~2#1); 1395488#L3046 assume 1 == ~doorState~0;~doorState~0 := 0; 1395486#L3052 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1395484#L2711-1 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1395480#L2732-1 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 1395478#L2684-1 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1395479#L2331-5 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1389398#L2500-5 assume !(0 == ~currentFloorID~0); 1389399#L2506-5 assume ~currentFloorID~0 > 0; 1390339#L2507-5 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1390563#L542-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1390565#L560-55 assume true;stopRequestedInDirection__wrappee__weight_#t~ret68#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret68#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret68#1; 1388458#L2511-5 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1388459#L2502-5 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1395373#L2702-1 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 1395374#L3054 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1392017#L2746 assume !(1 == ~currentHeading~0); 1391413#L2756 assume !(0 == ~currentFloorID~0); 1391414#L2762 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1391566#L2767 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1396244#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1396243#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 1396241#L1769 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1396239#L1770 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1396240#L2136 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 1396226#L1774 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1396217#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1396215#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1396214#L1365 assume true; 1396213#L1365-1 assume !false; 1396212#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1396211#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1396210#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1396209#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1396200#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1396194#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 1396188#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1396178#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1396177#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1396176#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 1396174#L2808 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1396173#L2127-1 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1396171#L2144 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1396159#L2165 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1396160#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 1424187#L2955 assume !(0 != timeShift_~tmp___9~2#1); 1396084#L3046 assume 1 == ~doorState~0;~doorState~0 := 0; 1396082#L3052 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1396080#L2711-1 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1395682#L2732-1 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 1395680#L2684-1 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1395681#L2331-5 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1394991#L2500-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1395725#L2502-5 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1396953#L2702-1 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 1396952#L3054 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 1396951#L2829-1 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~26#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 1396950#L2834-1 assume true;timeShift_#t~ret103#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1396948#L2711 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1396073#L2732 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 1391299#L2684 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1391300#L2331-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1390834#L2500-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1388208#L2502-2 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1388209#L2702 assume true;timeShift_#t~ret104#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 1391035#L3063 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1391084#L2746-2 assume !(1 == ~currentHeading~0); 1392401#L2756-2 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1390760#L2762-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1395671#L2767-2 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1395670#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1395669#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 1395667#L1769 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1395665#L1780 assume true; 1395663#L1784 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1395661#L1785 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1395662#L2136-1 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 1392710#L1789 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 1392698#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1392675#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1392674#L1365 [2024-11-17 08:39:11,148 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:11,148 INFO L85 PathProgramCache]: Analyzing trace with hash -517542837, now seen corresponding path program 1 times [2024-11-17 08:39:11,148 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:11,148 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1214178836] [2024-11-17 08:39:11,148 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:11,148 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:11,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:11,203 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:11,203 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:11,203 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1214178836] [2024-11-17 08:39:11,203 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1214178836] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:11,204 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:11,204 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-17 08:39:11,204 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1677384377] [2024-11-17 08:39:11,204 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:11,204 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:11,205 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:11,205 INFO L85 PathProgramCache]: Analyzing trace with hash -1679535667, now seen corresponding path program 1 times [2024-11-17 08:39:11,205 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:11,205 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [388851767] [2024-11-17 08:39:11,205 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:11,205 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:11,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:11,295 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 31 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-11-17 08:39:11,296 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:11,296 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [388851767] [2024-11-17 08:39:11,296 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [388851767] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:11,296 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:11,296 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:39:11,297 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1929824084] [2024-11-17 08:39:11,297 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:11,297 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:11,297 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:11,298 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-17 08:39:11,298 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-17 08:39:11,298 INFO L87 Difference]: Start difference. First operand 43438 states and 78454 transitions. cyclomatic complexity: 35019 Second operand has 3 states, 3 states have (on average 23.0) internal successors, (69), 2 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:11,687 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:11,687 INFO L93 Difference]: Finished difference Result 84413 states and 152583 transitions. [2024-11-17 08:39:11,687 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 84413 states and 152583 transitions. [2024-11-17 08:39:12,093 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 82110 [2024-11-17 08:39:13,009 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 84413 states to 84377 states and 152538 transitions. [2024-11-17 08:39:13,009 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 84377 [2024-11-17 08:39:13,075 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 84377 [2024-11-17 08:39:13,075 INFO L73 IsDeterministic]: Start isDeterministic. Operand 84377 states and 152538 transitions. [2024-11-17 08:39:13,128 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:13,128 INFO L218 hiAutomatonCegarLoop]: Abstraction has 84377 states and 152538 transitions. [2024-11-17 08:39:13,183 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84377 states and 152538 transitions. [2024-11-17 08:39:13,685 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84377 to 84377. [2024-11-17 08:39:13,757 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84377 states, 84377 states have (on average 1.807814925868424) internal successors, (152538), 84376 states have internal predecessors, (152538), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:13,891 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84377 states to 84377 states and 152538 transitions. [2024-11-17 08:39:13,891 INFO L240 hiAutomatonCegarLoop]: Abstraction has 84377 states and 152538 transitions. [2024-11-17 08:39:13,892 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-17 08:39:13,892 INFO L425 stractBuchiCegarLoop]: Abstraction has 84377 states and 152538 transitions. [2024-11-17 08:39:13,892 INFO L332 stractBuchiCegarLoop]: ======== Iteration 24 ============ [2024-11-17 08:39:13,892 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 84377 states and 152538 transitions. [2024-11-17 08:39:14,643 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 82110 [2024-11-17 08:39:14,643 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:14,643 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:14,663 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:14,663 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:14,663 INFO L745 eck$LassoCheckResult]: Stem: 1518960#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1518961#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~9#1, main_~tmp~13#1;havoc main_~retValue_acc~9#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1519257#L74 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1519348#L67 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1519349#L82 assume true;main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1517852#L1561 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1517853#L1533 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1516560#L1724 assume true;assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1516561#L1632 assume !(0 == getOrigin_~person#1); 1518653#L1636 assume !(1 == getOrigin_~person#1); 1518738#L1640 assume !(2 == getOrigin_~person#1); 1518989#L1644 assume !(3 == getOrigin_~person#1); 1516834#L1648 assume !(4 == getOrigin_~person#1); 1516835#L1652 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1518058#L1657 assume true;bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1518245#L813 assume !(0 == initPersonOnFloor_~floor#1); 1518660#L840 assume 1 == initPersonOnFloor_~floor#1; 1516364#L841 assume !(0 == initPersonOnFloor_~person#1); 1516365#L844 assume !(1 == initPersonOnFloor_~person#1); 1518794#L847 assume !(2 == initPersonOnFloor_~person#1); 1518261#L850 assume !(3 == initPersonOnFloor_~person#1); 1517948#L853 assume !(4 == initPersonOnFloor_~person#1); 1517064#L856 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1517065#L955 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1519279#L605 assume !(0 == callOnFloor_~floorID#1); 1519278#L608 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1516304#L626 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1518448#L957 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1518449#L1337 assume true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 1519095#L2808-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1519096#L2127-3 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1518815#L2144-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1517066#L2165-2 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1517067#L2819-1 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 1519507#L2955-1 assume !(0 != timeShift_~tmp___9~2#1); 1516750#L3046-1 assume 1 == ~doorState~0;~doorState~0 := 0; 1516751#L3052-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1517359#L2711-3 assume !(0 != ~floorButtons_0~0); 1517360#L2715-3 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1517371#L2732-3 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 1518855#L2684-3 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1519170#L2331-11 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1518847#L1116-17 assume true;stopRequestedInDirection__wrappee__weight_#t~ret62#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~19#1 := stopRequestedInDirection__wrappee__weight_#t~ret62#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1; 1518848#L2335-11 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~19#1); 1518736#L2341-11 assume !(~currentFloorID~0 < 0); 1518737#L2353-11 assume true; 1518743#L2357-11 assume !(~currentFloorID~0 < 0); 1519116#L2366-11 assume true; 1519117#L2370-11 assume ~currentFloorID~0 < 1; 1519400#L2371-11 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1517154#L542-117 assume !(0 == isFloorCalling_~floorID#1); 1517155#L546-117 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1518264#L560-117 assume true;stopRequestedInDirection__wrappee__weight_#t~ret64#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~2#1 := stopRequestedInDirection__wrappee__weight_#t~ret64#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret64#1; 1519025#L2375-11 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1516181#L2502-11 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1519508#L2702-3 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 1519505#L3054-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1519228#L2746-3 assume !(1 == ~currentHeading~0); 1518580#L2756-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1518157#L2762-3 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1519709#L2767-3 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1520129#L3076-1 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1520128#L2127-2 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 1520127#L1769-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1520126#L1780-1 assume true; 1520124#L1784-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1520120#L1785-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1520117#L2136-6 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 1520108#L1789-1 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 1520106#L1849-1 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1520105#L3078-1 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1520064#L1365 [2024-11-17 08:39:14,664 INFO L747 eck$LassoCheckResult]: Loop: 1520064#L1365 assume true; 1520062#L1365-1 assume !false; 1520060#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1520058#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1520056#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1520054#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1520049#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1520040#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 1520015#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1520000#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1519994#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1519987#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 1519982#L2808 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1519976#L2127-1 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1519967#L2144 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1519955#L2148 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1519956#L2165 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1539487#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 1539484#L2955 assume !(0 != timeShift_~tmp___9~2#1); 1526830#L3046 assume 1 == ~doorState~0;~doorState~0 := 0; 1526827#L3052 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1526828#L2711-1 assume !(0 != ~floorButtons_0~0); 1522999#L2715-1 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1527063#L2732-1 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 1527060#L2684-1 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1527061#L2331-5 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1527076#L2500-5 assume !(0 == ~currentFloorID~0); 1527826#L2506-5 assume ~currentFloorID~0 > 0; 1527824#L2507-5 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1527819#L542-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1527813#L560-55 assume true;stopRequestedInDirection__wrappee__weight_#t~ret68#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret68#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret68#1; 1527800#L2511-5 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1527798#L2502-5 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1527796#L2702-1 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 1525975#L3054 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1523685#L2746 assume !(1 == ~currentHeading~0); 1519291#L2756 assume !(0 == ~currentFloorID~0); 1519292#L2762 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1520168#L2767 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1551361#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1551360#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 1551357#L1769 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1551353#L1770 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1551348#L2136 assume true;__utac_acc__Specification2_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret49#1;havoc __utac_acc__Specification2_spec__3_#t~ret49#1; 1551338#L1774 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1551328#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1551325#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1551321#L1365 assume true; 1551319#L1365-1 assume !false; 1551317#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1551314#L1369 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1551312#L1970 assume true;cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1551306#L1373 assume 1 != cleanup_~tmp___0~2#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1551289#L542-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1550148#L560-65 assume true;anyStopRequested_#t~ret56#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret56#1;havoc anyStopRequested_#t~ret56#1; 1525945#L2235 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1524100#L2285 assume true;isIdle_#t~ret61#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret61#1;havoc isIdle_#t~ret61#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1524095#L2312 assume true;cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret61#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1524093#L1385 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3#1 / 3); 1524089#L2808 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1524086#L2127-1 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1524082#L2144 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1524083#L2165 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~8#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1575122#L2819 assume true;timeShift_#t~ret95#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~8#1, stopRequestedAtCurrentFloor_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1; 1592956#L2955 assume !(0 != timeShift_~tmp___9~2#1); 1549126#L3046 assume 1 == ~doorState~0;~doorState~0 := 0; 1549124#L3052 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1549123#L2711-1 assume !(0 != ~floorButtons_0~0); 1549105#L2715-1 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1549119#L2732-1 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 1549118#L2684-1 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1549112#L2331-5 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1525431#L2500-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1549107#L2502-5 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1549099#L2702-1 assume true;timeShift_#t~ret102#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret102#1;havoc timeShift_#t~ret102#1; 1549095#L3054 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 1549089#L2829-1 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~26#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 1549084#L2834-1 assume true;timeShift_#t~ret103#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1; 1549082#L2711 assume !(0 != ~floorButtons_0~0); 1546639#L2715 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~23#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~23#1; 1546635#L2732 assume true;stopRequestedInDirection_#t~ret73#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~23#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~20#1; 1546628#L2684 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~19#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1546629#L2331-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1546890#L2500-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1; 1516068#L2502-2 assume true;stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret62#1, stopRequestedInDirection__wrappee__weight_#t~ret63#1, stopRequestedInDirection__wrappee__weight_#t~ret64#1, stopRequestedInDirection__wrappee__weight_#t~ret65#1, stopRequestedInDirection__wrappee__weight_#t~ret66#1, stopRequestedInDirection__wrappee__weight_#t~ret67#1, stopRequestedInDirection__wrappee__weight_#t~ret68#1, stopRequestedInDirection__wrappee__weight_#t~ret69#1, stopRequestedInDirection__wrappee__weight_#t~ret70#1, stopRequestedInDirection__wrappee__weight_#t~ret71#1, stopRequestedInDirection__wrappee__weight_#t~ret72#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~21#1, stopRequestedInDirection__wrappee__weight_~tmp~19#1, stopRequestedInDirection__wrappee__weight_~tmp___0~6#1, stopRequestedInDirection__wrappee__weight_~tmp___1~5#1, stopRequestedInDirection__wrappee__weight_~tmp___2~3#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1516069#L2702 assume true;timeShift_#t~ret104#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1; 1518899#L3063 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1524684#L2746-2 assume !(1 == ~currentHeading~0); 1525330#L2756-2 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1518631#L2762-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1525322#L2767-2 assume true;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1525320#L3076 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~14#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1525319#L2127 assume true;__utac_acc__Specification2_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~14#1 := __utac_acc__Specification2_spec__3_#t~ret48#1;havoc __utac_acc__Specification2_spec__3_#t~ret48#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~14#1; 1525318#L1769 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1525316#L1780 assume true; 1525313#L1784 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1525311#L1785 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1525309#L2136-1 assume true;__utac_acc__Specification2_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret50#1;havoc __utac_acc__Specification2_spec__3_#t~ret50#1; 1520153#L1789 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 1520132#L1849 assume true;havoc __utac_acc__Specification2_spec__3_#t~ret48#1, __utac_acc__Specification2_spec__3_#t~ret49#1, __utac_acc__Specification2_spec__3_#t~ret50#1, __utac_acc__Specification2_spec__3_#t~ret51#1, __utac_acc__Specification2_spec__3_#t~ret52#1, __utac_acc__Specification2_spec__3_#t~ret53#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~14#1, __utac_acc__Specification2_spec__3_~tmp___0~4#1, __utac_acc__Specification2_spec__3_~tmp___1~3#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1520104#L3078 assume true;havoc timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_~tmp~25#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1520064#L1365 [2024-11-17 08:39:14,665 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:14,665 INFO L85 PathProgramCache]: Analyzing trace with hash 406196282, now seen corresponding path program 1 times [2024-11-17 08:39:14,665 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:14,665 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1004867547] [2024-11-17 08:39:14,665 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:14,665 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:14,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:14,716 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:14,717 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:14,717 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1004867547] [2024-11-17 08:39:14,717 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1004867547] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:14,717 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:14,717 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-17 08:39:14,717 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [158629888] [2024-11-17 08:39:14,717 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:14,718 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:14,718 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:14,718 INFO L85 PathProgramCache]: Analyzing trace with hash -1415551757, now seen corresponding path program 1 times [2024-11-17 08:39:14,718 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:14,718 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [455562125] [2024-11-17 08:39:14,718 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:14,718 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:14,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:14,798 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-11-17 08:39:14,798 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:14,798 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [455562125] [2024-11-17 08:39:14,799 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [455562125] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:14,799 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:14,799 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:39:14,799 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1189865237] [2024-11-17 08:39:14,799 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:14,799 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:14,799 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:14,799 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-17 08:39:14,799 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-17 08:39:14,800 INFO L87 Difference]: Start difference. First operand 84377 states and 152538 transitions. cyclomatic complexity: 68164 Second operand has 3 states, 3 states have (on average 23.666666666666668) internal successors, (71), 2 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:15,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:15,397 INFO L93 Difference]: Finished difference Result 166543 states and 301120 transitions. [2024-11-17 08:39:15,397 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 166543 states and 301120 transitions. [2024-11-17 08:39:16,769 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 163044 [2024-11-17 08:39:17,249 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 166543 states to 166471 states and 301030 transitions. [2024-11-17 08:39:17,250 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 166471 [2024-11-17 08:39:17,384 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 166471 [2024-11-17 08:39:17,384 INFO L73 IsDeterministic]: Start isDeterministic. Operand 166471 states and 301030 transitions. [2024-11-17 08:39:17,499 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:17,499 INFO L218 hiAutomatonCegarLoop]: Abstraction has 166471 states and 301030 transitions. [2024-11-17 08:39:17,602 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166471 states and 301030 transitions.