./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version f4b24e32 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 5643166a994eeb2bd259cf18f0a4b43a93b8e6b433c116ad537f0a1a02a75ec3 --- Real Ultimate output --- This is Ultimate 0.2.2-?-f4b24e3 [2022-07-14 15:42:44,005 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-14 15:42:44,006 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-14 15:42:44,055 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-14 15:42:44,056 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-14 15:42:44,058 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-14 15:42:44,060 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-14 15:42:44,063 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-14 15:42:44,064 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-14 15:42:44,066 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-14 15:42:44,067 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-14 15:42:44,069 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-14 15:42:44,070 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-14 15:42:44,073 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-14 15:42:44,074 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-14 15:42:44,075 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-14 15:42:44,077 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-14 15:42:44,078 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-14 15:42:44,079 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-14 15:42:44,080 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-14 15:42:44,083 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-14 15:42:44,084 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-14 15:42:44,084 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-14 15:42:44,085 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-14 15:42:44,086 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-14 15:42:44,090 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-14 15:42:44,093 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-14 15:42:44,093 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-14 15:42:44,094 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-14 15:42:44,095 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-14 15:42:44,095 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-14 15:42:44,096 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-14 15:42:44,097 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-14 15:42:44,097 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-14 15:42:44,098 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-14 15:42:44,098 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-14 15:42:44,098 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-14 15:42:44,099 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-14 15:42:44,099 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-14 15:42:44,099 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-14 15:42:44,100 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-14 15:42:44,101 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-14 15:42:44,102 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-07-14 15:42:44,119 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-14 15:42:44,121 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-14 15:42:44,121 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-14 15:42:44,121 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-14 15:42:44,122 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-14 15:42:44,123 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-14 15:42:44,123 INFO L138 SettingsManager]: * Use SBE=true [2022-07-14 15:42:44,123 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-07-14 15:42:44,123 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-07-14 15:42:44,124 INFO L138 SettingsManager]: * Use old map elimination=false [2022-07-14 15:42:44,124 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-07-14 15:42:44,124 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-07-14 15:42:44,124 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-07-14 15:42:44,124 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-14 15:42:44,124 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-14 15:42:44,125 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-07-14 15:42:44,125 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-14 15:42:44,125 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-14 15:42:44,125 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-14 15:42:44,125 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-07-14 15:42:44,125 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-07-14 15:42:44,125 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-07-14 15:42:44,126 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-14 15:42:44,126 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-14 15:42:44,126 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-07-14 15:42:44,126 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-14 15:42:44,126 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-07-14 15:42:44,126 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-14 15:42:44,127 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-14 15:42:44,127 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-14 15:42:44,127 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-14 15:42:44,129 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-07-14 15:42:44,129 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5643166a994eeb2bd259cf18f0a4b43a93b8e6b433c116ad537f0a1a02a75ec3 [2022-07-14 15:42:44,318 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-14 15:42:44,337 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-14 15:42:44,341 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-14 15:42:44,342 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-14 15:42:44,342 INFO L275 PluginConnector]: CDTParser initialized [2022-07-14 15:42:44,343 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c [2022-07-14 15:42:44,407 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3f9d3f2d1/cd3723f550424b67a911f1af4229e50f/FLAG14539c562 [2022-07-14 15:42:44,861 INFO L306 CDTParser]: Found 1 translation units. [2022-07-14 15:42:44,861 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c [2022-07-14 15:42:44,874 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3f9d3f2d1/cd3723f550424b67a911f1af4229e50f/FLAG14539c562 [2022-07-14 15:42:45,192 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3f9d3f2d1/cd3723f550424b67a911f1af4229e50f [2022-07-14 15:42:45,194 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-14 15:42:45,195 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-14 15:42:45,197 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-14 15:42:45,197 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-14 15:42:45,200 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-14 15:42:45,200 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.07 03:42:45" (1/1) ... [2022-07-14 15:42:45,201 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@30f6d4ab and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:42:45, skipping insertion in model container [2022-07-14 15:42:45,201 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.07 03:42:45" (1/1) ... [2022-07-14 15:42:45,206 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-14 15:42:45,243 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-14 15:42:45,572 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c[49225,49238] [2022-07-14 15:42:45,618 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-14 15:42:45,630 INFO L203 MainTranslator]: Completed pre-run [2022-07-14 15:42:45,704 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c[49225,49238] [2022-07-14 15:42:45,713 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-14 15:42:45,732 INFO L208 MainTranslator]: Completed translation [2022-07-14 15:42:45,732 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:42:45 WrapperNode [2022-07-14 15:42:45,732 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-14 15:42:45,733 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-14 15:42:45,733 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-14 15:42:45,734 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-14 15:42:45,739 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:42:45" (1/1) ... [2022-07-14 15:42:45,757 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:42:45" (1/1) ... [2022-07-14 15:42:45,970 INFO L137 Inliner]: procedures = 91, calls = 333, calls flagged for inlining = 186, calls inlined = 691, statements flattened = 21272 [2022-07-14 15:42:45,970 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-14 15:42:45,971 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-14 15:42:45,971 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-14 15:42:45,971 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-14 15:42:45,977 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:42:45" (1/1) ... [2022-07-14 15:42:45,978 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:42:45" (1/1) ... [2022-07-14 15:42:46,025 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:42:45" (1/1) ... [2022-07-14 15:42:46,025 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:42:45" (1/1) ... [2022-07-14 15:42:46,215 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:42:45" (1/1) ... [2022-07-14 15:42:46,335 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:42:45" (1/1) ... [2022-07-14 15:42:46,360 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:42:45" (1/1) ... [2022-07-14 15:42:46,415 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-14 15:42:46,417 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-14 15:42:46,418 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-14 15:42:46,418 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-14 15:42:46,419 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:42:45" (1/1) ... [2022-07-14 15:42:46,424 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:42:46,431 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:42:46,457 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:42:46,484 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-07-14 15:42:46,502 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-14 15:42:46,502 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-14 15:42:46,502 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-14 15:42:46,502 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-14 15:42:46,627 INFO L234 CfgBuilder]: Building ICFG [2022-07-14 15:42:46,628 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-14 15:42:52,108 INFO L275 CfgBuilder]: Performing block encoding [2022-07-14 15:42:52,135 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-14 15:42:52,136 INFO L299 CfgBuilder]: Removed 1 assume(true) statements. [2022-07-14 15:42:52,141 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.07 03:42:52 BoogieIcfgContainer [2022-07-14 15:42:52,142 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-14 15:42:52,142 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-07-14 15:42:52,142 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-07-14 15:42:52,145 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-07-14 15:42:52,145 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-14 15:42:52,145 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 14.07 03:42:45" (1/3) ... [2022-07-14 15:42:52,146 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@63622aed and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 14.07 03:42:52, skipping insertion in model container [2022-07-14 15:42:52,147 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-14 15:42:52,147 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:42:45" (2/3) ... [2022-07-14 15:42:52,147 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@63622aed and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 14.07 03:42:52, skipping insertion in model container [2022-07-14 15:42:52,147 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-14 15:42:52,147 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.07 03:42:52" (3/3) ... [2022-07-14 15:42:52,148 INFO L354 chiAutomizerObserver]: Analyzing ICFG elevator_spec14_product19.cil.c [2022-07-14 15:42:52,252 INFO L255 stractBuchiCegarLoop]: Interprodecural is true [2022-07-14 15:42:52,252 INFO L256 stractBuchiCegarLoop]: Hoare is false [2022-07-14 15:42:52,252 INFO L257 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-07-14 15:42:52,253 INFO L258 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-07-14 15:42:52,253 INFO L259 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-07-14 15:42:52,253 INFO L260 stractBuchiCegarLoop]: Difference is false [2022-07-14 15:42:52,253 INFO L261 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-07-14 15:42:52,253 INFO L265 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-07-14 15:42:52,273 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6036 states, 6035 states have (on average 1.8662800331400167) internal successors, (11263), 6035 states have internal predecessors, (11263), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:42:52,378 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1223 [2022-07-14 15:42:52,379 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:42:52,379 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:42:52,392 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:42:52,393 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:42:52,393 INFO L287 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-07-14 15:42:52,405 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6036 states, 6035 states have (on average 1.8662800331400167) internal successors, (11263), 6035 states have internal predecessors, (11263), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:42:52,459 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1223 [2022-07-14 15:42:52,459 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:42:52,459 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:42:52,463 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:42:52,463 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:42:52,470 INFO L752 eck$LassoCheckResult]: Stem: 3722#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 5900#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 5169#L2132true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 922#L2125true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 63#L2140true main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 3013#L2606true assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 3567#L2583true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 371#L2188true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 4972#L2213true bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3622#L2973true assume 0 == initPersonOnFloor_~floor#1; 2479#L2974true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1597#L3081-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2964#L2765true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 4305#L2777-2true assume { :end_inline_callOnFloor } true; 1214#L3117true assume { :end_inline_initPersonOnFloor } true; 219#L2388true assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3558#L2702true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4719#L2729true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4208#L1578true stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 375#L962true assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2594#L293true stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 5#L966true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 5404#L979true timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1393#L1115true assume !(0 != timeShift_~tmp___9~2#1); 1325#L1206true assume !(1 == ~doorState~0); 585#L1206-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5157#L2702-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4886#L2729-3true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4788#L1578-1true stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 3523#L845true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2013#L293-1true stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2530#L858true timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 5387#L1214true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2731#L902true assume !(1 == ~currentHeading~0); 2592#L912true assume !(0 == ~currentFloorID~0); 5173#L912-2true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1523#L918-1true assume { :end_inline_continueInDirection } true; 2628#L1223-2true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4547#L2702-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4564#L2729-25true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1271#L1578-3true __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 4331#L1697true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 3421#L1697-1true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 833#L1238true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1524#L2702-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1740#L2729-26true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5448#L1578-4true stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1292#L962-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 5838#L293-4true stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 3621#L966-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 867#L979-1true timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 2301#L1115-2true assume !(0 != timeShift_~tmp___9~2#1); 5755#L1206-3true assume !(1 == ~doorState~0); 2728#L1206-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5036#L2702-29true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3604#L2729-29true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 226#L1578-5true stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2231#L845-2true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3556#L293-5true stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 5364#L858-2true timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 2227#L1214-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4461#L902-3true assume !(1 == ~currentHeading~0); 3535#L912-9true assume !(0 == ~currentFloorID~0); 2460#L912-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1019#L918-7true assume { :end_inline_continueInDirection } true; 2602#L1223-5true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1844#L2702-51true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4146#L2729-51true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5301#L1578-7true __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 917#L1697-2true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1942#L1697-3true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 4437#L1238-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 976#L2702-52true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2806#L2729-52true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1835#L1578-8true stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 4148#L962-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 5822#L293-8true stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 2836#L966-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 4599#L979-2true timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 932#L1115-4true assume !(0 != timeShift_~tmp___9~2#1); 1929#L1206-6true assume !(1 == ~doorState~0); 3524#L1206-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 75#L2702-55true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 683#L2729-55true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3486#L1578-9true stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2086#L845-4true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2790#L293-9true stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 836#L858-4true timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 5200#L1214-4true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4586#L902-6true assume !(1 == ~currentHeading~0); 1748#L912-18true assume !(0 == ~currentFloorID~0); 4945#L912-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1009#L918-13true assume { :end_inline_continueInDirection } true; 1399#L1223-8true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5161#L2702-77true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1767#L2729-77true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2744#L1578-11true __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 5882#L1697-4true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1801#L1697-5true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5916#L1238-2true assume { :end_inline_timeShift } true; 4206#L2400true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 4387#L2188-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 68#L2213-1true bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5416#L2973-1true assume 0 == initPersonOnFloor_~floor#1; 1166#L2974-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2624#L3081-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3950#L2765-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1627#L2777-5true assume { :end_inline_callOnFloor } true; 1591#L3117-1true assume { :end_inline_initPersonOnFloor } true; 359#L2333true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5537#L2702-78true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1698#L2729-78true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 231#L1578-12true stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1119#L962-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 407#L293-12true stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1897#L966-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 4334#L979-3true timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1900#L1115-6true assume !(0 != timeShift_~tmp___9~2#1); 2047#L1206-9true assume !(1 == ~doorState~0); 5248#L1206-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 268#L2702-81true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3131#L2729-81true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2674#L1578-13true stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 5118#L845-6true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 579#L293-13true stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 4517#L858-6true timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1014#L1214-6true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2480#L902-9true assume !(1 == ~currentHeading~0); 495#L912-27true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4555#L912-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5112#L918-19true assume { :end_inline_continueInDirection } true; 647#L1223-11true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4738#L2702-103true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2420#L2729-103true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1005#L1578-15true __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1307#L1697-6true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 689#L1697-7true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1243#L1238-3true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 784#L2415-2true [2022-07-14 15:42:52,471 INFO L754 eck$LassoCheckResult]: Loop: 784#L2415-2true assume !false; 1737#L2416true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 3425#L2419true assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 425#L140true cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 249#L2423true assume 1 != cleanup_~tmp___0~11#1; 3682#L2423-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5181#L2702-104true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 870#L2729-104true anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 3346#L401true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 5848#L465true isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 4654#L478true cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 2023#L2435true assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2998#L2702-109true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3048#L2729-109true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4433#L1578-16true stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 5262#L962-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 5579#L293-16true stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1228#L966-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 5824#L979-4true timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 3392#L1115-8true assume !(0 != timeShift_~tmp___9~2#1); 4731#L1206-12true assume 1 == ~doorState~0;~doorState~0 := 0; 3045#L1206-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4335#L2702-112true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5469#L2729-112true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2454#L1578-17true stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 902#L845-8true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4963#L293-17true stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 822#L858-8true timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 3588#L1214-8true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2650#L902-12true assume !(1 == ~currentHeading~0); 120#L912-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1521#L912-38true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5871#L918-25true assume { :end_inline_continueInDirection } true; 3462#L1223-14true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3768#L2702-134true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2571#L2729-134true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4999#L1578-19true __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 3215#L1697-8true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 5093#L1697-9true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2370#L1238-4true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 784#L2415-2true [2022-07-14 15:42:52,476 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:42:52,476 INFO L85 PathProgramCache]: Analyzing trace with hash -426851756, now seen corresponding path program 1 times [2022-07-14 15:42:52,483 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:42:52,483 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2070912370] [2022-07-14 15:42:52,483 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:42:52,484 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:42:52,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:42:52,677 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:42:52,677 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:42:52,678 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2070912370] [2022-07-14 15:42:52,678 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2070912370] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:42:52,678 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:42:52,679 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:42:52,680 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1637507202] [2022-07-14 15:42:52,680 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:42:52,683 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:42:52,684 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:42:52,684 INFO L85 PathProgramCache]: Analyzing trace with hash 1763966285, now seen corresponding path program 1 times [2022-07-14 15:42:52,684 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:42:52,684 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [494149723] [2022-07-14 15:42:52,685 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:42:52,685 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:42:52,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:42:52,803 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:42:52,803 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:42:52,804 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [494149723] [2022-07-14 15:42:52,804 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [494149723] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:42:52,804 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:42:52,804 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:42:52,804 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [313327300] [2022-07-14 15:42:52,805 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:42:52,805 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:42:52,806 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:42:52,851 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-14 15:42:52,851 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-14 15:42:52,865 INFO L87 Difference]: Start difference. First operand has 6036 states, 6035 states have (on average 1.8662800331400167) internal successors, (11263), 6035 states have internal predecessors, (11263), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 7 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:42:59,682 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:42:59,682 INFO L93 Difference]: Finished difference Result 51613 states and 95897 transitions. [2022-07-14 15:42:59,683 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-07-14 15:42:59,690 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 51613 states and 95897 transitions. [2022-07-14 15:43:00,149 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 11239 [2022-07-14 15:43:00,456 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 51613 states to 51505 states and 95777 transitions. [2022-07-14 15:43:00,457 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 51505 [2022-07-14 15:43:00,516 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 51505 [2022-07-14 15:43:00,517 INFO L73 IsDeterministic]: Start isDeterministic. Operand 51505 states and 95777 transitions. [2022-07-14 15:43:00,589 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:43:00,589 INFO L369 hiAutomatonCegarLoop]: Abstraction has 51505 states and 95777 transitions. [2022-07-14 15:43:00,638 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51505 states and 95777 transitions. [2022-07-14 15:43:01,205 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51505 to 17456. [2022-07-14 15:43:01,236 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17456 states, 17456 states have (on average 1.8582149404216315) internal successors, (32437), 17455 states have internal predecessors, (32437), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:43:01,267 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17456 states to 17456 states and 32437 transitions. [2022-07-14 15:43:01,268 INFO L392 hiAutomatonCegarLoop]: Abstraction has 17456 states and 32437 transitions. [2022-07-14 15:43:01,268 INFO L374 stractBuchiCegarLoop]: Abstraction has 17456 states and 32437 transitions. [2022-07-14 15:43:01,268 INFO L287 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-07-14 15:43:01,268 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17456 states and 32437 transitions. [2022-07-14 15:43:01,317 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3564 [2022-07-14 15:43:01,317 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:43:01,317 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:43:01,319 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:43:01,320 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:43:01,320 INFO L752 eck$LassoCheckResult]: Stem: 63077#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 63078#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 63852#L2132 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 59690#L2125 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 57864#L2140 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 57865#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 62485#L2583 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 58606#L2188 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 58607#L2213 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 62997#L2973 assume 0 == initPersonOnFloor_~floor#1; 61924#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 57959#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 60799#L2765 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 59561#L2777-2 assume { :end_inline_callOnFloor } true; 60189#L3117 assume { :end_inline_initPersonOnFloor } true; 58257#L2388 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 58258#L2702 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 62948#L2729 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 63426#L1578 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 63427#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 62064#L293 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 57702#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 57704#L979 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 69350#L1115 assume !(0 != timeShift_~tmp___9~2#1); 69351#L1206 assume !(1 == ~doorState~0); 74695#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 74694#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 74693#L2729-3 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 74692#L1578-1 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 74690#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 74691#L293-1 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 74699#L858 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 74697#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 74696#L902 assume !(1 == ~currentHeading~0); 62062#L912 assume !(0 == ~currentFloorID~0); 61077#L912-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 60683#L918-1 assume { :end_inline_continueInDirection } true; 60684#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 62102#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 63622#L2729-25 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 60272#L1578-3 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 60273#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 58972#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 59527#L1238 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 59528#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 60685#L2729-26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 61002#L1578-4 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 63923#L962-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 64220#L293-4 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 64217#L966-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 62996#L979-1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 71110#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 71111#L1206-3 assume !(1 == ~doorState~0); 75017#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 75016#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 75015#L2729-29 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 75014#L1578-5 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 75012#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 62946#L293-5 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 62947#L858-2 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 61632#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 61633#L902-3 assume !(1 == ~currentHeading~0); 62926#L912-9 assume !(0 == ~currentFloorID~0); 61146#L912-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 59850#L918-7 assume { :end_inline_continueInDirection } true; 59851#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 61147#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 61148#L2729-51 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 69586#L1578-7 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 69581#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 69579#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 69564#L1238-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 69563#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 64024#L2729-52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 69562#L1578-8 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 64185#L962-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 64183#L293-8 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 64180#L966-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 62318#L979-2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 71510#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 71511#L1206-6 assume !(1 == ~doorState~0); 74934#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 74933#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 74932#L2729-55 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 74931#L1578-9 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 74930#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 62271#L293-9 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 59534#L858-4 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 59535#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 63640#L902-6 assume !(1 == ~currentHeading~0); 61012#L912-18 assume !(0 == ~currentFloorID~0); 61013#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 59831#L918-13 assume { :end_inline_continueInDirection } true; 59361#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 60484#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 61037#L2729-77 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 61038#L1578-11 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 62232#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 61086#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 61087#L1238-2 assume { :end_inline_timeShift } true; 63423#L2400 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 63424#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 57878#L2213-1 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 57879#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 60106#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 58076#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 62099#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 59587#L2777-5 assume { :end_inline_callOnFloor } true; 60792#L3117-1 assume { :end_inline_initPersonOnFloor } true; 58582#L2333 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 58583#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 60947#L2729-78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 58285#L1578-12 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 58286#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 60029#L293-12 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 64066#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 61220#L979-3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 74258#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 74259#L1206-9 assume !(1 == ~doorState~0); 74778#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 74777#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 74776#L2729-81 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 74775#L1578-13 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 63841#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 63842#L293-13 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 74773#L858-6 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 74757#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 61926#L902-9 assume !(1 == ~currentHeading~0); 58869#L912-27 assume !(0 == ~currentFloorID~0); 58870#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 63627#L918-19 assume { :end_inline_continueInDirection } true; 59175#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 59176#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 61863#L2729-103 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 59824#L1578-15 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 59825#L1697-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 58672#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 59261#L1238-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 59445#L2415-2 [2022-07-14 15:43:01,321 INFO L754 eck$LassoCheckResult]: Loop: 59445#L2415-2 assume !false; 59446#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 60999#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 58718#L140 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 58327#L2423 assume 1 != cleanup_~tmp___0~11#1; 58328#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 63043#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 59595#L2729-104 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 59596#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 58661#L465 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 63662#L478 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 61389#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 61390#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 62467#L2729-109 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 69557#L1578-16 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 64170#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 64167#L293-16 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 64164#L966-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 60207#L979-4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 73702#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 73703#L1206-12 assume 1 == ~doorState~0;~doorState~0 := 0; 74883#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 74882#L2702-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 74881#L2729-112 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 74880#L1578-17 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 74878#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 63788#L293-17 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 59113#L858-8 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 59510#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 62969#L902-12 assume !(1 == ~currentHeading~0); 58018#L912-36 assume !(0 == ~currentFloorID~0); 58019#L912-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 60680#L918-25 assume { :end_inline_continueInDirection } true; 58340#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 62871#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 62042#L2729-134 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 62043#L1578-19 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 62672#L1697-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 60893#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 61800#L1238-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 59445#L2415-2 [2022-07-14 15:43:01,321 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:43:01,322 INFO L85 PathProgramCache]: Analyzing trace with hash -819878766, now seen corresponding path program 1 times [2022-07-14 15:43:01,322 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:43:01,322 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2127108111] [2022-07-14 15:43:01,322 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:43:01,322 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:43:01,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:43:01,529 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:43:01,530 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:43:01,530 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2127108111] [2022-07-14 15:43:01,530 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2127108111] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:43:01,530 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:43:01,530 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:43:01,530 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1136161148] [2022-07-14 15:43:01,530 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:43:01,531 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:43:01,531 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:43:01,531 INFO L85 PathProgramCache]: Analyzing trace with hash 1370939275, now seen corresponding path program 1 times [2022-07-14 15:43:01,531 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:43:01,531 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [641158067] [2022-07-14 15:43:01,531 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:43:01,532 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:43:01,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:43:01,586 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:43:01,587 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:43:01,587 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [641158067] [2022-07-14 15:43:01,587 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [641158067] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:43:01,587 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:43:01,588 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-14 15:43:01,588 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [481782236] [2022-07-14 15:43:01,588 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:43:01,588 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:43:01,588 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:43:01,589 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-14 15:43:01,589 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-07-14 15:43:01,589 INFO L87 Difference]: Start difference. First operand 17456 states and 32437 transitions. cyclomatic complexity: 14983 Second operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:43:08,364 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:43:08,364 INFO L93 Difference]: Finished difference Result 160884 states and 300086 transitions. [2022-07-14 15:43:08,365 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-07-14 15:43:08,365 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 160884 states and 300086 transitions. [2022-07-14 15:43:09,197 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 43892 [2022-07-14 15:43:09,870 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 160884 states to 160884 states and 300086 transitions. [2022-07-14 15:43:09,871 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 160884 [2022-07-14 15:43:09,995 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 160884 [2022-07-14 15:43:09,995 INFO L73 IsDeterministic]: Start isDeterministic. Operand 160884 states and 300086 transitions. [2022-07-14 15:43:10,111 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:43:10,111 INFO L369 hiAutomatonCegarLoop]: Abstraction has 160884 states and 300086 transitions. [2022-07-14 15:43:10,208 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160884 states and 300086 transitions. [2022-07-14 15:43:11,074 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160884 to 34795. [2022-07-14 15:43:11,131 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34795 states, 34795 states have (on average 1.8577956602960195) internal successors, (64642), 34794 states have internal predecessors, (64642), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:43:11,205 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34795 states to 34795 states and 64642 transitions. [2022-07-14 15:43:11,205 INFO L392 hiAutomatonCegarLoop]: Abstraction has 34795 states and 64642 transitions. [2022-07-14 15:43:11,205 INFO L374 stractBuchiCegarLoop]: Abstraction has 34795 states and 64642 transitions. [2022-07-14 15:43:11,206 INFO L287 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-07-14 15:43:11,206 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 34795 states and 64642 transitions. [2022-07-14 15:43:11,463 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7066 [2022-07-14 15:43:11,463 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:43:11,463 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:43:11,493 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:43:11,494 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:43:11,496 INFO L752 eck$LassoCheckResult]: Stem: 241586#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 241587#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 242435#L2132 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 238102#L2125 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 236274#L2140 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 236275#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 240962#L2583 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 237013#L2188 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 237014#L2213 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 241503#L2973 assume 0 == initPersonOnFloor_~floor#1; 240387#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 236369#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 239221#L2765 assume !(0 == callOnFloor_~floorID#1); 240912#L2768 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 237973#L2777-2 assume { :end_inline_callOnFloor } true; 242031#L3117 assume { :end_inline_initPersonOnFloor } true; 236666#L2388 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 236667#L2702 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 243617#L2729 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 241960#L1578 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 241961#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 240522#L293 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 240523#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 245579#L979 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 245577#L1115 assume !(0 != timeShift_~tmp___9~2#1); 245576#L1206 assume !(1 == ~doorState~0); 245575#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 245574#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 245573#L2729-3 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 245572#L1578-1 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 245571#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 245569#L293-1 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 245560#L858 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 245554#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 245547#L902 assume !(1 == ~currentHeading~0); 245539#L912 assume !(0 == ~currentFloorID~0); 245535#L912-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 245531#L918-1 assume { :end_inline_continueInDirection } true; 243571#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 243569#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 243567#L2729-25 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 243566#L1578-3 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 243564#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 243560#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 243558#L1238 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 243559#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 243553#L2729-26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 243554#L1578-4 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 243545#L962-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 243546#L293-4 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 243536#L966-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 241502#L979-1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 259444#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 259309#L1206-3 assume !(1 == ~doorState~0); 259301#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 259300#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 259299#L2729-29 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 259298#L1578-5 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 259296#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 259294#L293-5 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 259286#L858-2 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 259277#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 259268#L902-3 assume !(1 == ~currentHeading~0); 259259#L912-9 assume !(0 == ~currentFloorID~0); 259254#L912-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 259245#L918-7 assume { :end_inline_continueInDirection } true; 249116#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 239575#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 239576#L2729-51 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 242480#L1578-7 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 242481#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 239720#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 239721#L1238-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 238187#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 238188#L2729-52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 254471#L1578-8 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 241923#L962-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 241924#L293-8 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 248530#L966-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 240785#L979-2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 257611#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 257609#L1206-6 assume !(1 == ~doorState~0); 257608#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 236307#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 236308#L2729-55 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 237658#L1578-9 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 239904#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 239906#L293-9 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 237946#L858-4 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 237947#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 242444#L902-6 assume !(1 == ~currentHeading~0); 257419#L912-18 assume !(0 == ~currentFloorID~0); 257405#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 256578#L918-13 assume { :end_inline_continueInDirection } true; 248560#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 248561#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 242663#L2729-77 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 248551#L1578-11 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 248532#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 239512#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 239513#L1238-2 assume { :end_inline_timeShift } true; 241957#L2400 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 241958#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 236288#L2213-1 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 236289#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 242530#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 240562#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 240563#L2765-2 assume !(0 == callOnFloor_~floorID#1); 254309#L2768-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 257545#L2777-5 assume { :end_inline_callOnFloor } true; 257544#L3117-1 assume { :end_inline_initPersonOnFloor } true; 257543#L2333 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 242568#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 239369#L2729-78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 239370#L1578-12 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 238437#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 238439#L293-12 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 246871#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 239650#L979-3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 260550#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 260541#L1206-9 assume !(1 == ~doorState~0); 260529#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 236783#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 236784#L2729-81 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 241080#L1578-13 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 260510#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 237450#L293-13 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 237451#L858-6 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 238250#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 238252#L902-9 assume !(1 == ~currentHeading~0); 240390#L912-27 assume !(0 == ~currentFloorID~0); 263246#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 242420#L918-19 assume { :end_inline_continueInDirection } true; 238013#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 263851#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 248730#L2729-103 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 263850#L1578-15 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 263848#L1697-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 263847#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 263846#L1238-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 263840#L2415-2 [2022-07-14 15:43:11,497 INFO L754 eck$LassoCheckResult]: Loop: 263840#L2415-2 assume !false; 263838#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 263837#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 263836#L140 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 263835#L2423 assume 1 != cleanup_~tmp___0~11#1; 263834#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 263833#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 263832#L2729-104 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 263828#L401 assume !(0 != anyStopRequested_~tmp___3~0#1); 263821#L405 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 263814#L465 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 263812#L478 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 263810#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 263811#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 246877#L2729-109 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 263807#L1578-16 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 263805#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 263806#L293-16 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 263802#L966-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 238617#L979-4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 241306#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 241308#L1206-12 assume 1 == ~doorState~0;~doorState~0 := 0; 240995#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 240996#L2702-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 242048#L2729-112 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 269041#L1578-17 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 238061#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 238062#L293-17 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 237523#L858-8 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 237923#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 240592#L902-12 assume !(1 == ~currentHeading~0); 236428#L912-36 assume !(0 == ~currentFloorID~0); 236429#L912-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 239101#L918-25 assume { :end_inline_continueInDirection } true; 236750#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 241369#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 241616#L2729-134 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 242383#L1578-19 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 242384#L1697-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 264650#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 263845#L1238-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 263840#L2415-2 [2022-07-14 15:43:11,500 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:43:11,500 INFO L85 PathProgramCache]: Analyzing trace with hash -963253205, now seen corresponding path program 1 times [2022-07-14 15:43:11,500 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:43:11,501 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [481642160] [2022-07-14 15:43:11,501 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:43:11,501 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:43:11,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:43:11,589 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:43:11,589 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:43:11,589 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [481642160] [2022-07-14 15:43:11,590 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [481642160] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:43:11,590 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:43:11,590 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:43:11,590 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2138964276] [2022-07-14 15:43:11,591 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:43:11,592 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:43:11,592 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:43:11,592 INFO L85 PathProgramCache]: Analyzing trace with hash 1167168847, now seen corresponding path program 1 times [2022-07-14 15:43:11,593 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:43:11,593 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2062640864] [2022-07-14 15:43:11,593 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:43:11,593 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:43:11,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:43:11,651 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:43:11,652 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:43:11,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2062640864] [2022-07-14 15:43:11,652 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2062640864] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:43:11,652 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:43:11,653 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-14 15:43:11,653 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1807802190] [2022-07-14 15:43:11,653 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:43:11,654 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:43:11,654 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:43:11,655 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-14 15:43:11,655 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-07-14 15:43:11,655 INFO L87 Difference]: Start difference. First operand 34795 states and 64642 transitions. cyclomatic complexity: 29849 Second operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 8 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:43:22,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:43:22,054 INFO L93 Difference]: Finished difference Result 199925 states and 371307 transitions. [2022-07-14 15:43:22,055 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2022-07-14 15:43:22,056 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 199925 states and 371307 transitions. [2022-07-14 15:43:23,141 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 50561 [2022-07-14 15:43:23,855 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 199925 states to 199925 states and 371307 transitions. [2022-07-14 15:43:23,856 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 199925 [2022-07-14 15:43:24,005 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 199925 [2022-07-14 15:43:24,006 INFO L73 IsDeterministic]: Start isDeterministic. Operand 199925 states and 371307 transitions. [2022-07-14 15:43:24,345 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:43:24,346 INFO L369 hiAutomatonCegarLoop]: Abstraction has 199925 states and 371307 transitions. [2022-07-14 15:43:24,457 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 199925 states and 371307 transitions. [2022-07-14 15:43:25,320 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 199925 to 34514. [2022-07-14 15:43:25,361 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34514 states, 34514 states have (on average 1.8574201773193486) internal successors, (64107), 34513 states have internal predecessors, (64107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:43:25,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34514 states to 34514 states and 64107 transitions. [2022-07-14 15:43:25,427 INFO L392 hiAutomatonCegarLoop]: Abstraction has 34514 states and 64107 transitions. [2022-07-14 15:43:25,427 INFO L374 stractBuchiCegarLoop]: Abstraction has 34514 states and 64107 transitions. [2022-07-14 15:43:25,427 INFO L287 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-07-14 15:43:25,427 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 34514 states and 64107 transitions. [2022-07-14 15:43:25,717 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 7045 [2022-07-14 15:43:25,718 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:43:25,718 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:43:25,720 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:43:25,720 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:43:25,720 INFO L752 eck$LassoCheckResult]: Stem: 476350#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 476351#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 477164#L2132 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 472922#L2125 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 471090#L2140 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 471091#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 475742#L2583 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 471832#L2188 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 471833#L2213 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 476271#L2973 assume 0 == initPersonOnFloor_~floor#1; 475171#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 471185#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 474033#L2765 assume !(0 == callOnFloor_~floorID#1); 475694#L2768 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 472792#L2777-2 assume { :end_inline_callOnFloor } true; 473416#L3117 assume { :end_inline_initPersonOnFloor } true; 471483#L2388 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 471484#L2702 assume !(0 == isFloorCalling_~floorID#1); 475919#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 472838#L2729 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 477403#L1578 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 477404#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 475314#L293 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 475315#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 486157#L979 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 486137#L1115 assume !(0 != timeShift_~tmp___9~2#1); 486106#L1206 assume !(1 == ~doorState~0); 485673#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 477423#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 477163#L2729-3 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 489497#L1578-1 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 489495#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 489493#L293-1 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 489489#L858 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 489479#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 489471#L902 assume !(1 == ~currentHeading~0); 489462#L912 assume !(0 == ~currentFloorID~0); 489458#L912-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 489454#L918-1 assume { :end_inline_continueInDirection } true; 489301#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 489299#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 477430#L2729-25 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 489298#L1578-3 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 489293#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 489291#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 489290#L1238 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 473918#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 473919#L2729-26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 477251#L1578-4 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 477252#L962-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 490752#L2702-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 490750#L2729-28 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 490747#L935-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 490746#L947-3 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 490745#L979-1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 490742#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 490744#L1206-3 assume !(1 == ~doorState~0); 498371#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 477125#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 476260#L2729-29 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 471502#L1578-5 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 471503#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 474876#L293-5 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 498261#L858-2 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 498218#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 498216#L902-3 assume !(1 == ~currentHeading~0); 498201#L912-9 assume !(0 == ~currentFloorID~0); 498197#L912-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 498193#L918-7 assume { :end_inline_continueInDirection } true; 475322#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 474384#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 474385#L2729-51 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 476674#L1578-7 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 472912#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 472914#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 474523#L1238-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 476852#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 477371#L2729-52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 487411#L1578-8 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 487410#L962-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 487409#L2702-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 487403#L2729-54 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 487400#L935-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 487399#L947-5 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 487398#L979-2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 487396#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 487395#L1206-6 assume !(1 == ~doorState~0); 487394#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 487393#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 479477#L2729-55 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 487392#L1578-9 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 487390#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 487388#L293-9 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 487384#L858-4 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 487374#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 487366#L902-6 assume !(1 == ~currentHeading~0); 487357#L912-18 assume !(0 == ~currentFloorID~0); 487351#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 487342#L918-13 assume { :end_inline_continueInDirection } true; 482099#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 482098#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 477425#L2729-77 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 482097#L1578-11 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 482092#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 482089#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 482088#L1238-2 assume { :end_inline_timeShift } true; 482087#L2400 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 482084#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 482080#L2213-1 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 482078#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 482028#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 482013#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 482011#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 481149#L2777-5 assume { :end_inline_callOnFloor } true; 481148#L3117-1 assume { :end_inline_initPersonOnFloor } true; 477393#L2333 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 477390#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 477387#L2729-78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 477385#L1578-12 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 477382#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 477379#L293-12 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 477377#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 474457#L979-3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 479974#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 479975#L1206-9 assume !(1 == ~doorState~0); 485712#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 485711#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 485710#L2729-81 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 485709#L1578-13 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 485707#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 485705#L293-13 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 485700#L858-6 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 485698#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 485606#L902-9 assume !(1 == ~currentHeading~0); 485583#L912-27 assume !(0 == ~currentFloorID~0); 485573#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 483827#L918-19 assume { :end_inline_continueInDirection } true; 480256#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 479421#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 479420#L2729-103 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 479419#L1578-15 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 479418#L1697-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 479417#L293-15 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 479416#L1587-3 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 479413#L1702-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 479412#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 479411#L1238-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 479403#L2415-2 [2022-07-14 15:43:25,721 INFO L754 eck$LassoCheckResult]: Loop: 479403#L2415-2 assume !false; 479401#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 479351#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 479306#L140 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 479299#L2423 assume 1 != cleanup_~tmp___0~11#1; 479296#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 479295#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 479294#L2729-104 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 479293#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 479292#L465 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 479291#L478 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 479289#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 479287#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 479286#L2729-109 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 479285#L1578-16 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 479283#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 479282#L293-16 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 479281#L966-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 473435#L979-4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 481004#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 481005#L1206-12 assume 1 == ~doorState~0;~doorState~0 := 0; 475773#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 475774#L2702-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 501016#L2729-112 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 501015#L1578-17 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 501013#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 501012#L293-17 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 500653#L858-8 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 500633#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 500625#L902-12 assume !(1 == ~currentHeading~0); 500615#L912-36 assume !(0 == ~currentFloorID~0); 500609#L912-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 499638#L918-25 assume { :end_inline_continueInDirection } true; 491517#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 479472#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 479467#L2729-134 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 479465#L1578-19 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 479463#L1697-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 479457#L293-19 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 479455#L1587-4 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 479429#L1702-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 479425#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 479410#L1238-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 479403#L2415-2 [2022-07-14 15:43:25,722 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:43:25,722 INFO L85 PathProgramCache]: Analyzing trace with hash -860599393, now seen corresponding path program 1 times [2022-07-14 15:43:25,722 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:43:25,722 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [260378147] [2022-07-14 15:43:25,722 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:43:25,722 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:43:25,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:43:25,751 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:43:25,752 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:43:25,752 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [260378147] [2022-07-14 15:43:25,752 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [260378147] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:43:25,752 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:43:25,752 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:43:25,752 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1936488029] [2022-07-14 15:43:25,753 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:43:25,753 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:43:25,753 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:43:25,753 INFO L85 PathProgramCache]: Analyzing trace with hash 154677403, now seen corresponding path program 1 times [2022-07-14 15:43:25,753 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:43:25,754 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [720424268] [2022-07-14 15:43:25,754 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:43:25,754 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:43:25,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-14 15:43:25,763 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-14 15:43:25,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-14 15:43:25,787 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-07-14 15:43:26,916 INFO L210 LassoAnalysis]: Preferences: [2022-07-14 15:43:26,916 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-07-14 15:43:26,916 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-07-14 15:43:26,917 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-07-14 15:43:26,917 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-07-14 15:43:26,917 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:26,917 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-07-14 15:43:26,917 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-07-14 15:43:26,917 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product19.cil.c_Iteration4_Loop [2022-07-14 15:43:26,917 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-07-14 15:43:26,917 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-07-14 15:43:26,936 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,943 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,947 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,949 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,950 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,952 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,953 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,955 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,956 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,968 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,970 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,971 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,973 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,974 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,975 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,980 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,981 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,982 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,983 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,985 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,986 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,987 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,989 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,991 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,993 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,994 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,996 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:26,998 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,000 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,003 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,004 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,008 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,011 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,012 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,013 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,014 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,016 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,018 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,021 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,023 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,024 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,027 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,031 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,033 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,034 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,038 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,040 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,041 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,043 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,044 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,054 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,055 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,063 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,064 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,065 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,066 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,068 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,069 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,070 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,074 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,075 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,077 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,078 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:27,465 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-07-14 15:43:27,466 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-07-14 15:43:27,467 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:27,467 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:27,469 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:27,470 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2022-07-14 15:43:27,475 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:43:27,475 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:43:27,492 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:43:27,492 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___0~10#1=1, ULTIMATE.start_isExecutiveFloor_#res#1=1, ULTIMATE.start_isExecutiveFloor_~retValue_acc~16#1=1} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___0~10#1=1, ULTIMATE.start_isExecutiveFloor_#res#1=1, ULTIMATE.start_isExecutiveFloor_~retValue_acc~16#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:43:27,522 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Ended with exit code 0 [2022-07-14 15:43:27,523 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:27,523 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:27,524 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:27,525 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2022-07-14 15:43:27,527 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:43:27,527 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:43:27,545 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:43:27,546 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp~24#1=0, ULTIMATE.start_isIdle_~retValue_acc~7#1=0, ULTIMATE.start_isIdle_#res#1=0} Honda state: {ULTIMATE.start_cleanup_~tmp~24#1=0, ULTIMATE.start_isIdle_~retValue_acc~7#1=0, ULTIMATE.start_isIdle_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:43:27,561 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:27,562 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:27,562 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:27,563 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:27,564 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2022-07-14 15:43:27,566 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:43:27,566 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:43:27,580 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:43:27,580 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret24#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret24#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:43:27,623 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:27,624 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:27,624 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:27,625 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:27,627 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2022-07-14 15:43:27,629 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:43:27,629 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:43:27,649 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:43:27,650 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret6#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret6#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:43:27,667 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:27,668 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:27,668 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:27,669 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:27,670 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2022-07-14 15:43:27,672 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:43:27,672 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:43:27,693 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:43:27,694 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___0~0#1=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___0~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:43:27,709 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:27,710 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:27,710 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:27,711 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:27,716 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2022-07-14 15:43:27,718 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:43:27,718 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:43:27,733 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:43:27,734 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret31#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret31#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:43:27,749 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:27,750 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:27,750 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:27,751 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:27,752 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2022-07-14 15:43:27,753 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:43:27,754 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:43:27,787 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:43:27,788 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret45#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret45#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:43:27,810 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:27,810 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:27,810 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:27,812 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:27,813 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2022-07-14 15:43:27,816 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:43:27,816 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:43:27,822 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-14 15:43:27,822 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret53#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret53#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-14 15:43:27,838 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:27,838 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:27,839 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:27,841 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:27,845 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2022-07-14 15:43:27,851 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-14 15:43:27,851 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:43:27,895 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:27,895 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:27,896 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:27,897 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:27,902 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-07-14 15:43:27,902 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-14 15:43:27,902 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2022-07-14 15:43:31,590 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-07-14 15:43:31,596 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:31,596 INFO L210 LassoAnalysis]: Preferences: [2022-07-14 15:43:31,596 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-07-14 15:43:31,596 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-07-14 15:43:31,596 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-07-14 15:43:31,596 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-07-14 15:43:31,596 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:31,597 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-07-14 15:43:31,597 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-07-14 15:43:31,597 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product19.cil.c_Iteration4_Loop [2022-07-14 15:43:31,597 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-07-14 15:43:31,597 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-07-14 15:43:31,599 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,617 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,622 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,625 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,629 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,631 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,632 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,633 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,635 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,636 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,650 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,652 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,653 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,655 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,656 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,657 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,662 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,663 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,665 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,666 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,667 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,668 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,670 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,686 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,687 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,689 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,690 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,691 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,692 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,693 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,694 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,695 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,696 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,698 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,699 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,700 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,701 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,702 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,703 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,703 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,706 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,708 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,709 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,710 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,711 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,713 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,714 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,715 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,716 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,717 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,721 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,724 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,725 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,726 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,727 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,727 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,728 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,731 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,732 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,735 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,736 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,737 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:31,744 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-14 15:43:32,359 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-07-14 15:43:32,362 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-07-14 15:43:32,363 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:32,363 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:32,364 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:32,365 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2022-07-14 15:43:32,369 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:43:32,375 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:43:32,375 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:43:32,375 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:43:32,375 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:43:32,375 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:43:32,377 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:43:32,377 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:43:32,379 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:43:32,404 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:32,405 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:32,405 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:32,406 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:32,407 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2022-07-14 15:43:32,408 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:43:32,414 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:43:32,414 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:43:32,414 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:43:32,414 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:43:32,414 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:43:32,415 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:43:32,415 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:43:32,431 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:43:32,446 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:32,448 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:32,449 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:32,450 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:32,451 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2022-07-14 15:43:32,452 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:43:32,457 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:43:32,457 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:43:32,457 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:43:32,457 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:43:32,457 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:43:32,458 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:43:32,459 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:43:32,474 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:43:32,490 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:32,490 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:32,491 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:32,492 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:32,493 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2022-07-14 15:43:32,494 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:43:32,500 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:43:32,500 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:43:32,500 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:43:32,500 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:43:32,500 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:43:32,501 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:43:32,501 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:43:32,517 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:43:32,534 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:32,535 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:32,535 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:32,536 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:32,548 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2022-07-14 15:43:32,548 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:43:32,553 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:43:32,554 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:43:32,554 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:43:32,554 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:43:32,554 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:43:32,554 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:43:32,555 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:43:32,570 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:43:32,586 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:32,586 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:32,586 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:32,587 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:32,588 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2022-07-14 15:43:32,590 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:43:32,595 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:43:32,595 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:43:32,595 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:43:32,595 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:43:32,595 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:43:32,595 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:43:32,596 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:43:32,596 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:43:32,612 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Ended with exit code 0 [2022-07-14 15:43:32,612 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:32,612 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:32,613 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:32,615 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2022-07-14 15:43:32,616 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:43:32,621 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:43:32,621 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:43:32,621 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:43:32,621 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:43:32,621 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:43:32,622 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:43:32,622 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:43:32,638 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:43:32,653 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:32,653 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:32,653 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:32,654 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:32,656 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2022-07-14 15:43:32,657 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:43:32,662 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:43:32,662 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:43:32,662 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:43:32,662 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:43:32,662 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:43:32,663 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:43:32,663 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:43:32,663 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:43:32,678 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Ended with exit code 0 [2022-07-14 15:43:32,679 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:32,679 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:32,680 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:32,682 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2022-07-14 15:43:32,683 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:43:32,689 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:43:32,689 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:43:32,689 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:43:32,689 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:43:32,689 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:43:32,689 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:43:32,689 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:43:32,690 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-14 15:43:32,707 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:32,707 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:32,708 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:32,709 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:32,713 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2022-07-14 15:43:32,714 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-14 15:43:32,719 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-14 15:43:32,719 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-14 15:43:32,719 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-14 15:43:32,719 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-14 15:43:32,720 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-14 15:43:32,722 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-14 15:43:32,722 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-14 15:43:32,725 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-07-14 15:43:32,776 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2022-07-14 15:43:32,776 INFO L444 ModelExtractionUtils]: 8 out of 11 variables were initially zero. Simplification set additionally 1 variables to zero. [2022-07-14 15:43:32,777 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:43:32,777 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:43:32,779 INFO L229 MonitoredProcess]: Starting monitored process 22 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:43:32,806 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-07-14 15:43:32,806 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-07-14 15:43:32,806 INFO L513 LassoAnalysis]: Proved termination. [2022-07-14 15:43:32,807 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2022-07-14 15:43:32,818 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2022-07-14 15:43:32,824 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:32,826 INFO L293 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-07-14 15:43:32,840 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:43:32,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:43:32,960 INFO L263 TraceCheckSpWp]: Trace formula consists of 991 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-14 15:43:32,964 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-14 15:43:33,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:43:33,108 INFO L263 TraceCheckSpWp]: Trace formula consists of 171 conjuncts, 18 conjunts are in the unsatisfiable core [2022-07-14 15:43:33,109 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-14 15:43:33,321 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:43:33,327 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 8 loop predicates [2022-07-14 15:43:33,327 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 34514 states and 64107 transitions. cyclomatic complexity: 29598 Second operand has 10 states, 10 states have (on average 19.0) internal successors, (190), 10 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:43:34,709 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Forceful destruction successful, exit code 0 [2022-07-14 15:43:37,182 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 34514 states and 64107 transitions. cyclomatic complexity: 29598. Second operand has 10 states, 10 states have (on average 19.0) internal successors, (190), 10 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 151062 states and 279759 transitions. Complement of second has 27 states. [2022-07-14 15:43:37,183 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 14 states 1 stem states 12 non-accepting loop states 1 accepting loop states [2022-07-14 15:43:37,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 19.0) internal successors, (190), 10 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:43:37,203 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 30838 transitions. [2022-07-14 15:43:37,205 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 30838 transitions. Stem has 147 letters. Loop has 43 letters. [2022-07-14 15:43:37,206 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-07-14 15:43:37,206 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 30838 transitions. Stem has 190 letters. Loop has 43 letters. [2022-07-14 15:43:37,207 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-07-14 15:43:37,208 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 30838 transitions. Stem has 147 letters. Loop has 86 letters. [2022-07-14 15:43:37,209 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-07-14 15:43:37,209 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 151062 states and 279759 transitions. [2022-07-14 15:43:37,792 INFO L131 ngComponentsAnalysis]: Automaton has 15 accepting balls. 56466 [2022-07-14 15:43:38,527 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 151062 states to 151062 states and 279759 transitions. [2022-07-14 15:43:38,528 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 92507 [2022-07-14 15:43:38,605 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 92861 [2022-07-14 15:43:38,606 INFO L73 IsDeterministic]: Start isDeterministic. Operand 151062 states and 279759 transitions. [2022-07-14 15:43:38,609 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:43:38,609 INFO L369 hiAutomatonCegarLoop]: Abstraction has 151062 states and 279759 transitions. [2022-07-14 15:43:38,699 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151062 states and 279759 transitions. [2022-07-14 15:43:39,947 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151062 to 67056. [2022-07-14 15:43:40,013 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67056 states, 67056 states have (on average 1.8568062514912909) internal successors, (124510), 67055 states have internal predecessors, (124510), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:43:40,144 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67056 states to 67056 states and 124510 transitions. [2022-07-14 15:43:40,145 INFO L392 hiAutomatonCegarLoop]: Abstraction has 67056 states and 124510 transitions. [2022-07-14 15:43:40,145 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:43:40,145 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-14 15:43:40,145 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 15:43:40,146 INFO L87 Difference]: Start difference. First operand 67056 states and 124510 transitions. Second operand has 3 states, 3 states have (on average 49.0) internal successors, (147), 3 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:43:41,009 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:43:41,010 INFO L93 Difference]: Finished difference Result 113766 states and 211191 transitions. [2022-07-14 15:43:41,010 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-14 15:43:41,011 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 113766 states and 211191 transitions. [2022-07-14 15:43:41,457 INFO L131 ngComponentsAnalysis]: Automaton has 24 accepting balls. 44014 [2022-07-14 15:43:42,115 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 113766 states to 113766 states and 211191 transitions. [2022-07-14 15:43:42,116 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 80006 [2022-07-14 15:43:42,164 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 80006 [2022-07-14 15:43:42,164 INFO L73 IsDeterministic]: Start isDeterministic. Operand 113766 states and 211191 transitions. [2022-07-14 15:43:42,175 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:43:42,175 INFO L369 hiAutomatonCegarLoop]: Abstraction has 113766 states and 211191 transitions. [2022-07-14 15:43:42,231 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 113766 states and 211191 transitions. [2022-07-14 15:43:43,072 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 113766 to 67056. [2022-07-14 15:43:43,195 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67056 states, 67056 states have (on average 1.8567167740396087) internal successors, (124504), 67055 states have internal predecessors, (124504), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:43:43,392 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67056 states to 67056 states and 124504 transitions. [2022-07-14 15:43:43,392 INFO L392 hiAutomatonCegarLoop]: Abstraction has 67056 states and 124504 transitions. [2022-07-14 15:43:43,392 INFO L374 stractBuchiCegarLoop]: Abstraction has 67056 states and 124504 transitions. [2022-07-14 15:43:43,392 INFO L287 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-07-14 15:43:43,393 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 67056 states and 124504 transitions. [2022-07-14 15:43:43,570 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 22007 [2022-07-14 15:43:43,571 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:43:43,571 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:43:43,574 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:43:43,575 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:43:43,575 INFO L752 eck$LassoCheckResult]: Stem: 844632#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 844633#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 845630#L2132 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 840371#L2125 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 838158#L2140 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 838159#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 843858#L2583 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 839058#L2188 assume !(0 == getOrigin_~person#1); 839059#L2192 assume !(1 == getOrigin_~person#1); 841130#L2196 assume !(2 == getOrigin_~person#1); 841131#L2200 assume !(3 == getOrigin_~person#1); 843115#L2204 assume !(4 == getOrigin_~person#1); 844208#L2208 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 845546#L2213 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 844532#L2973 assume 0 == initPersonOnFloor_~floor#1; 843131#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 838283#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 841732#L2765 assume !(0 == callOnFloor_~floorID#1); 843792#L2768 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 840214#L2777-2 assume { :end_inline_callOnFloor } true; 845155#L3117 assume { :end_inline_initPersonOnFloor } true; 838632#L2388 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 838633#L2702 assume !(0 == isFloorCalling_~floorID#1); 847644#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 847608#L2729 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 847606#L1578 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 846007#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 846002#L293 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 846003#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 846389#L979 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 846356#L1115 assume !(0 != timeShift_~tmp___9~2#1); 846354#L1206 assume !(1 == ~doorState~0); 846353#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 846349#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 846350#L2729-3 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 847249#L1578-1 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 847248#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 847121#L293-1 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 847119#L858 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 847116#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 847113#L902 assume !(1 == ~currentHeading~0); 847109#L912 assume !(0 == ~currentFloorID~0); 847107#L912-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 841579#L918-1 assume { :end_inline_continueInDirection } true; 841580#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 855112#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 846130#L2729-25 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 855111#L1578-3 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 855106#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 855104#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 855103#L1238 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 855102#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 845922#L2729-26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 855096#L1578-4 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 855095#L962-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 855088#L2702-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 855085#L2729-28 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 855071#L935-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 855070#L947-3 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 855068#L979-1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 855067#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 855065#L1206-3 assume !(1 == ~doorState~0); 855064#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 855063#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 845960#L2729-29 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 855057#L1578-5 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 855054#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 855033#L293-5 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 855032#L858-2 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 855030#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 855031#L902-3 assume !(1 == ~currentHeading~0); 857354#L912-9 assume !(0 == ~currentFloorID~0); 842170#L912-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 840550#L918-7 assume { :end_inline_continueInDirection } true; 840551#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 854176#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 849668#L2729-51 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 854175#L1578-7 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 854171#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 854169#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 854154#L1238-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 854153#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 845924#L2729-52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 854133#L1578-8 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 854082#L962-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 854083#L2702-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 860891#L2729-54 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 860883#L935-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 860882#L947-5 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 860881#L979-2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 860879#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 860878#L1206-6 assume !(1 == ~doorState~0); 860877#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 860876#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 860383#L2729-55 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 860875#L1578-9 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 860870#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 853864#L293-9 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 853863#L858-4 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 853860#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 853862#L902-6 assume !(1 == ~currentHeading~0); 853857#L912-18 assume !(0 == ~currentFloorID~0); 841991#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 840531#L918-13 assume { :end_inline_continueInDirection } true; 839967#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 862356#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 845919#L2729-77 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 862355#L1578-11 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 862350#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 862348#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 862347#L1238-2 assume { :end_inline_timeShift } true; 862346#L2400 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 862343#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 862339#L2213-1 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 862338#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 862318#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 862304#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 860953#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 860943#L2777-5 assume { :end_inline_callOnFloor } true; 860941#L3117-1 assume { :end_inline_initPersonOnFloor } true; 860939#L2333 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 860935#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 860934#L2729-78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 860933#L1578-12 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 860925#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 860565#L293-12 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 860563#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 840028#L979-3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 842260#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 842262#L1206-9 assume !(1 == ~doorState~0); 842500#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 838771#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 838772#L2729-81 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 843433#L1578-13 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 843434#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 845620#L293-13 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 869422#L858-6 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 869420#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 843133#L902-9 assume !(1 == ~currentHeading~0); 843135#L912-27 assume !(0 == ~currentFloorID~0); 845310#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 845311#L918-19 assume { :end_inline_continueInDirection } true; 869372#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 869371#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 858022#L2729-103 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 869370#L1578-15 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 869369#L1697-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 869368#L293-15 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 869367#L1587-3 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 869364#L1702-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 869363#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 869362#L1238-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 869360#L2415-2 assume !false; 869361#L2416 [2022-07-14 15:43:43,576 INFO L754 eck$LassoCheckResult]: Loop: 869361#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 886075#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 886074#L140 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 886073#L2423 assume 1 != cleanup_~tmp___0~11#1; 886072#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 886071#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 886066#L2729-104 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 886064#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 886060#L465 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 886059#L478 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 886058#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 886057#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 885891#L2729-109 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 886056#L1578-16 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 886054#L962-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 886055#L2702-111 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 886076#L2729-111 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 886061#L935-9 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 886035#L947-9 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 886034#L979-4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 886032#L1115-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 886033#L1117-8 assume !(0 != ~persons_0~0); 891293#L1117-9 assume !(0 != ~persons_1~0); 891269#L1131-4 assume !(0 != ~persons_2~0); 891252#L1145-4 assume !(0 != ~persons_3~0); 891249#L1159-4 assume !(0 != ~persons_4~0); 891244#L1173-4 assume !(0 != ~persons_5~0); 891240#L1187-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~5#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~5#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 891239#L2793-48 assume 0 == isPersonOnFloor_~floor#1; 891222#L2794-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 891198#L2965-24 processWaitingOnFloor_#t~ret33#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~5#1 := processWaitingOnFloor_#t~ret33#1;havoc processWaitingOnFloor_#t~ret33#1; 891195#L1016-12 assume !(0 != processWaitingOnFloor_~tmp___0~5#1); 891193#L1016-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 891192#L2793-50 assume 0 == isPersonOnFloor_~floor#1; 891169#L2794-25 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 891142#L2965-25 processWaitingOnFloor_#t~ret35#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret35#1;havoc processWaitingOnFloor_#t~ret35#1; 891140#L1029-12 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 891138#L1029-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 891137#L2793-52 assume 0 == isPersonOnFloor_~floor#1; 891033#L2794-26 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 891031#L2965-26 processWaitingOnFloor_#t~ret37#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret37#1;havoc processWaitingOnFloor_#t~ret37#1; 891029#L1042-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 891027#L1042-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 891020#L2793-54 assume 0 == isPersonOnFloor_~floor#1; 890972#L2794-27 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 890963#L2965-27 processWaitingOnFloor_#t~ret39#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret39#1;havoc processWaitingOnFloor_#t~ret39#1; 890961#L1055-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 890959#L1055-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 890958#L2793-56 assume 0 == isPersonOnFloor_~floor#1; 890868#L2794-28 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 890854#L2965-28 processWaitingOnFloor_#t~ret41#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret41#1;havoc processWaitingOnFloor_#t~ret41#1; 890852#L1068-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 890850#L1068-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 890849#L2793-58 assume 0 == isPersonOnFloor_~floor#1; 890764#L2794-29 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 890743#L2965-29 processWaitingOnFloor_#t~ret43#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret43#1;havoc processWaitingOnFloor_#t~ret43#1; 890741#L1081-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 890739#L1081-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 890737#L2737-68 assume !(0 == resetCallOnFloor_~floorID#1); 890735#L2740-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 890732#L2749-104 assume { :end_inline_resetCallOnFloor } true; 890731#L1094-4 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 890730#L264-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 890725#L276-14 assume { :end_inline_resetFloorButton } true; 890720#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 886091#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 886090#L2729-134 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 886089#L1578-19 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 886088#L1697-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 886087#L293-19 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 886086#L1587-4 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 886084#L1702-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 886082#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 883660#L1238-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 886077#L2415-2 assume !false; 869361#L2416 [2022-07-14 15:43:43,577 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:43:43,577 INFO L85 PathProgramCache]: Analyzing trace with hash -1775678488, now seen corresponding path program 1 times [2022-07-14 15:43:43,577 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:43:43,577 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [86331984] [2022-07-14 15:43:43,577 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:43:43,577 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:43:43,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:43:43,624 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:43:43,625 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:43:43,625 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [86331984] [2022-07-14 15:43:43,625 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [86331984] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:43:43,625 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:43:43,625 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-14 15:43:43,625 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [689093104] [2022-07-14 15:43:43,625 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:43:43,626 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:43:43,626 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:43:43,626 INFO L85 PathProgramCache]: Analyzing trace with hash 36074213, now seen corresponding path program 1 times [2022-07-14 15:43:43,626 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:43:43,626 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1660409032] [2022-07-14 15:43:43,627 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:43:43,627 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:43:43,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:43:43,664 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:43:43,664 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:43:43,664 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1660409032] [2022-07-14 15:43:43,664 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1660409032] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:43:43,664 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:43:43,665 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-14 15:43:43,665 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1540703763] [2022-07-14 15:43:43,665 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:43:43,665 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:43:43,665 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:43:43,666 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-14 15:43:43,666 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-07-14 15:43:43,666 INFO L87 Difference]: Start difference. First operand 67056 states and 124504 transitions. cyclomatic complexity: 57466 Second operand has 8 states, 8 states have (on average 9.375) internal successors, (75), 8 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:43:49,613 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:43:49,613 INFO L93 Difference]: Finished difference Result 276110 states and 512244 transitions. [2022-07-14 15:43:49,613 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-07-14 15:43:49,614 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 276110 states and 512244 transitions. [2022-07-14 15:43:51,167 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 83940 [2022-07-14 15:43:52,346 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 276110 states to 276110 states and 512244 transitions. [2022-07-14 15:43:52,347 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 191621 [2022-07-14 15:43:52,460 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 191621 [2022-07-14 15:43:52,460 INFO L73 IsDeterministic]: Start isDeterministic. Operand 276110 states and 512244 transitions. [2022-07-14 15:43:52,501 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:43:52,509 INFO L369 hiAutomatonCegarLoop]: Abstraction has 276110 states and 512244 transitions. [2022-07-14 15:43:52,660 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 276110 states and 512244 transitions. [2022-07-14 15:43:53,939 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 276110 to 66801. [2022-07-14 15:43:54,002 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66801 states, 66801 states have (on average 1.8566787922336492) internal successors, (124028), 66800 states have internal predecessors, (124028), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:43:54,131 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66801 states to 66801 states and 124028 transitions. [2022-07-14 15:43:54,132 INFO L392 hiAutomatonCegarLoop]: Abstraction has 66801 states and 124028 transitions. [2022-07-14 15:43:54,132 INFO L374 stractBuchiCegarLoop]: Abstraction has 66801 states and 124028 transitions. [2022-07-14 15:43:54,132 INFO L287 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-07-14 15:43:54,132 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 66801 states and 124028 transitions. [2022-07-14 15:43:54,317 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21917 [2022-07-14 15:43:54,320 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:43:54,320 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:43:54,342 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:43:54,342 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:43:54,342 INFO L752 eck$LassoCheckResult]: Stem: 1187790#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1187791#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 1188765#L2132 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1183609#L2125 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 1181398#L2140 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 1181399#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 1187042#L2583 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1182297#L2188 assume !(0 == getOrigin_~person#1); 1182298#L2192 assume !(1 == getOrigin_~person#1); 1184361#L2196 assume !(2 == getOrigin_~person#1); 1184362#L2200 assume !(3 == getOrigin_~person#1); 1186323#L2204 assume !(4 == getOrigin_~person#1); 1187389#L2208 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1188687#L2213 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1187696#L2973 assume 0 == initPersonOnFloor_~floor#1; 1186338#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1181523#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1184955#L2765 assume !(0 == callOnFloor_~floorID#1); 1186977#L2768 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1183453#L2777-2 assume { :end_inline_callOnFloor } true; 1184185#L3117 assume { :end_inline_initPersonOnFloor } true; 1184186#L2388 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1187637#L2702 assume !(0 == isFloorCalling_~floorID#1); 1187255#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1183516#L2729 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1189060#L1578 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1189061#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1186510#L293 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1186511#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1195442#L979 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1195441#L1115 assume !(0 != timeShift_~tmp___9~2#1); 1195440#L1206 assume !(1 == ~doorState~0); 1195277#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1190995#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1188632#L2729-3 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1188594#L1578-1 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1187603#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1185670#L293-1 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1185671#L858 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1204804#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1204802#L902 assume !(1 == ~currentHeading~0); 1204800#L912 assume !(0 == ~currentFloorID~0); 1185304#L912-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1184806#L918-1 assume { :end_inline_continueInDirection } true; 1184807#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1186560#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1188464#L2729-25 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1184303#L1578-3 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1184304#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1182747#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1183417#L1238 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1183418#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1189027#L2729-26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1199990#L1578-4 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1184349#L962-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1184350#L2702-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1199985#L2729-28 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1199972#L935-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1199970#L947-3 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1199969#L979-1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1199922#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 1188964#L1206-3 assume !(1 == ~doorState~0); 1186694#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1186695#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1187682#L2729-29 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1181892#L1578-5 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1181893#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1185989#L293-5 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1200820#L858-2 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1200755#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1200741#L902-3 assume !(1 == ~currentHeading~0); 1200731#L912-9 assume !(0 == ~currentFloorID~0); 1200725#L912-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1199295#L918-7 assume { :end_inline_continueInDirection } true; 1198627#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1198626#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1190949#L2729-51 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1198625#L1578-7 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1198620#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1198618#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1198617#L1238-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1183706#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1183707#L2729-52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1185374#L1578-8 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1185375#L962-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1188177#L2702-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1198607#L2729-54 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1198603#L935-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1188299#L947-5 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1188300#L979-2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1183629#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 1183631#L1206-6 assume !(1 == ~doorState~0); 1203156#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1203155#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1190988#L2729-55 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1203153#L1578-9 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1203016#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1202977#L293-9 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1202974#L858-4 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1202971#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1202969#L902-6 assume !(1 == ~currentHeading~0); 1202967#L912-18 assume !(0 == ~currentFloorID~0); 1202907#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1201142#L918-13 assume { :end_inline_continueInDirection } true; 1200817#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1188764#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1185243#L2729-77 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1185244#L1578-11 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1186718#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1200810#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1200809#L1238-2 assume { :end_inline_timeShift } true; 1200808#L2400 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1200805#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1200801#L2213-1 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1200798#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 1200779#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1200765#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1200764#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1183480#L2777-5 assume { :end_inline_callOnFloor } true; 1184944#L3117-1 assume { :end_inline_initPersonOnFloor } true; 1184945#L2333 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1190862#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1190858#L2729-78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1190859#L1578-12 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1190854#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1190855#L293-12 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1190860#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1185480#L979-3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1208161#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 1208162#L1206-9 assume !(1 == ~doorState~0); 1211286#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1205535#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1205536#L2729-81 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1205531#L1578-13 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1205532#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1205527#L293-13 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1205522#L858-6 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1205523#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1211119#L902-9 assume !(1 == ~currentHeading~0); 1211114#L912-27 assume !(0 == ~currentFloorID~0); 1211113#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1210289#L918-19 assume { :end_inline_continueInDirection } true; 1206625#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1206620#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1206618#L2729-103 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1206612#L1578-15 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1184381#L1697-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1184382#L293-15 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 1212451#L1587-3 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 1212448#L1702-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 1212447#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1212446#L1238-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1212443#L2415-2 assume !false; 1212444#L2416 [2022-07-14 15:43:54,343 INFO L754 eck$LassoCheckResult]: Loop: 1212444#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1222507#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1222506#L140 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 1222505#L2423 assume 1 != cleanup_~tmp___0~11#1; 1222504#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1222503#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1222502#L2729-104 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 1222501#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1222500#L465 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1222499#L478 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 1222497#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1222494#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1220705#L2729-109 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1222493#L1578-16 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1222492#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1222491#L293-16 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1213072#L966-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1213073#L2702-110 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1222485#L2729-110 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1222482#L935-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1222481#L947-8 stopRequestedAtCurrentFloor_#t~ret31#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1222480#L979-4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1222478#L1115-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1222479#L1117-8 assume !(0 != ~persons_0~0); 1223315#L1117-9 assume !(0 != ~persons_1~0); 1223291#L1131-4 assume !(0 != ~persons_2~0); 1223279#L1145-4 assume !(0 != ~persons_3~0); 1223277#L1159-4 assume !(0 != ~persons_4~0); 1223271#L1173-4 assume !(0 != ~persons_5~0); 1223267#L1187-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~5#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~5#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1223266#L2793-48 assume 0 == isPersonOnFloor_~floor#1; 1223237#L2794-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1223212#L2965-24 processWaitingOnFloor_#t~ret33#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~5#1 := processWaitingOnFloor_#t~ret33#1;havoc processWaitingOnFloor_#t~ret33#1; 1223209#L1016-12 assume !(0 != processWaitingOnFloor_~tmp___0~5#1); 1223205#L1016-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1223204#L2793-50 assume 0 == isPersonOnFloor_~floor#1; 1223005#L2794-25 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1222979#L2965-25 processWaitingOnFloor_#t~ret35#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret35#1;havoc processWaitingOnFloor_#t~ret35#1; 1222972#L1029-12 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1222969#L1029-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1222967#L2793-52 assume 0 == isPersonOnFloor_~floor#1; 1222851#L2794-26 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1222842#L2965-26 processWaitingOnFloor_#t~ret37#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret37#1;havoc processWaitingOnFloor_#t~ret37#1; 1222831#L1042-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1222817#L1042-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1222813#L2793-54 assume 0 == isPersonOnFloor_~floor#1; 1222778#L2794-27 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1222770#L2965-27 processWaitingOnFloor_#t~ret39#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret39#1;havoc processWaitingOnFloor_#t~ret39#1; 1222762#L1055-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1222759#L1055-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1222758#L2793-56 assume 0 == isPersonOnFloor_~floor#1; 1222737#L2794-28 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1222713#L2965-28 processWaitingOnFloor_#t~ret41#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret41#1;havoc processWaitingOnFloor_#t~ret41#1; 1222709#L1068-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1222707#L1068-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1222706#L2793-58 assume 0 == isPersonOnFloor_~floor#1; 1222683#L2794-29 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1222657#L2965-29 processWaitingOnFloor_#t~ret43#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret43#1;havoc processWaitingOnFloor_#t~ret43#1; 1222654#L1081-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1222652#L1081-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1222650#L2737-68 assume !(0 == resetCallOnFloor_~floorID#1); 1222648#L2740-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 1222645#L2749-104 assume { :end_inline_resetCallOnFloor } true; 1222644#L1094-4 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1222643#L264-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1222638#L276-14 assume { :end_inline_resetFloorButton } true; 1222619#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1222518#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1220776#L2729-134 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1222517#L1578-19 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1222516#L1697-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1222515#L293-19 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 1222514#L1587-4 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 1222512#L1702-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 1222510#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1222509#L1238-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1222508#L2415-2 assume !false; 1212444#L2416 [2022-07-14 15:43:54,343 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:43:54,344 INFO L85 PathProgramCache]: Analyzing trace with hash -1775678488, now seen corresponding path program 2 times [2022-07-14 15:43:54,344 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:43:54,344 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1886131747] [2022-07-14 15:43:54,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:43:54,344 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:43:54,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:43:54,425 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:43:54,426 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:43:54,426 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1886131747] [2022-07-14 15:43:54,426 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1886131747] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:43:54,426 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:43:54,426 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-14 15:43:54,426 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1330744332] [2022-07-14 15:43:54,427 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:43:54,427 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:43:54,427 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:43:54,427 INFO L85 PathProgramCache]: Analyzing trace with hash 667873277, now seen corresponding path program 1 times [2022-07-14 15:43:54,427 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:43:54,428 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [406132000] [2022-07-14 15:43:54,428 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:43:54,428 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:43:54,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:43:54,448 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:43:54,449 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:43:54,449 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [406132000] [2022-07-14 15:43:54,449 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [406132000] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:43:54,449 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:43:54,449 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 15:43:54,449 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [838090247] [2022-07-14 15:43:54,449 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:43:54,450 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:43:54,450 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:43:54,450 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-14 15:43:54,450 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-14 15:43:54,450 INFO L87 Difference]: Start difference. First operand 66801 states and 124028 transitions. cyclomatic complexity: 57245 Second operand has 5 states, 5 states have (on average 15.4) internal successors, (77), 5 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:43:56,644 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:43:56,644 INFO L93 Difference]: Finished difference Result 95196 states and 174169 transitions. [2022-07-14 15:43:56,645 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-14 15:43:56,647 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 95196 states and 174169 transitions. [2022-07-14 15:43:57,000 INFO L131 ngComponentsAnalysis]: Automaton has 22 accepting balls. 29471 [2022-07-14 15:43:57,547 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 95196 states to 95196 states and 174169 transitions. [2022-07-14 15:43:57,548 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 70431 [2022-07-14 15:43:57,596 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 70431 [2022-07-14 15:43:57,597 INFO L73 IsDeterministic]: Start isDeterministic. Operand 95196 states and 174169 transitions. [2022-07-14 15:43:57,597 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-14 15:43:57,597 INFO L369 hiAutomatonCegarLoop]: Abstraction has 95196 states and 174169 transitions. [2022-07-14 15:43:57,644 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95196 states and 174169 transitions. [2022-07-14 15:43:58,341 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95196 to 66801. [2022-07-14 15:43:58,401 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66801 states, 66801 states have (on average 1.8353467762458646) internal successors, (122603), 66800 states have internal predecessors, (122603), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:43:58,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66801 states to 66801 states and 122603 transitions. [2022-07-14 15:43:58,837 INFO L392 hiAutomatonCegarLoop]: Abstraction has 66801 states and 122603 transitions. [2022-07-14 15:43:58,838 INFO L374 stractBuchiCegarLoop]: Abstraction has 66801 states and 122603 transitions. [2022-07-14 15:43:58,838 INFO L287 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-07-14 15:43:58,838 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 66801 states and 122603 transitions. [2022-07-14 15:43:58,983 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21917 [2022-07-14 15:43:58,984 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:43:58,984 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:43:59,005 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:43:59,005 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:43:59,006 INFO L752 eck$LassoCheckResult]: Stem: 1349949#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1349950#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 1351037#L2132 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1345642#L2125 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 1343411#L2140 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 1343412#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 1349173#L2583 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1344312#L2188 assume !(0 == getOrigin_~person#1); 1344313#L2192 assume !(1 == getOrigin_~person#1); 1346406#L2196 assume !(2 == getOrigin_~person#1); 1346407#L2200 assume !(3 == getOrigin_~person#1); 1348419#L2204 assume !(4 == getOrigin_~person#1); 1349523#L2208 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1350946#L2213 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1349846#L2973 assume 0 == initPersonOnFloor_~floor#1; 1348438#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1343536#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1347007#L2765 assume !(0 == callOnFloor_~floorID#1); 1349108#L2768 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1345479#L2777-2 assume { :end_inline_callOnFloor } true; 1346229#L3117 assume { :end_inline_initPersonOnFloor } true; 1346230#L2388 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1349786#L2702 assume !(0 == isFloorCalling_~floorID#1); 1349386#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1345544#L2729 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1351389#L1578 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1351387#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1348622#L293 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1343219#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1343221#L979 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1351393#L1115 assume !(0 != timeShift_~tmp___9~2#1); 1351391#L1206 assume !(1 == ~doorState~0); 1351388#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1351369#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1351370#L2729-3 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1362033#L1578-1 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1349749#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1349750#L293-1 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1361961#L858 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1361959#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1352231#L902 assume !(1 == ~currentHeading~0); 1352232#L912 assume !(0 == ~currentFloorID~0); 1351039#L912-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1351040#L918-1 assume { :end_inline_continueInDirection } true; 1361955#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1361952#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1351459#L2729-25 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1361948#L1578-3 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1361949#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1362267#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1362266#L1238 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1362265#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1351445#L2729-26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1361930#L1578-4 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1361916#L962-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1348895#L2702-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1345191#L2729-28 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1348717#L935-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1348718#L947-3 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1351141#L979-1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1361822#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 1361821#L1206-3 assume !(1 == ~doorState~0); 1361820#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1361819#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1351451#L2729-29 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1361810#L1578-5 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1361782#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1361761#L293-5 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1361760#L858-2 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1361759#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1350604#L902-3 assume !(1 == ~currentHeading~0); 1350605#L912-9 assume !(0 == ~currentFloorID~0); 1347453#L912-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1345825#L918-7 assume { :end_inline_continueInDirection } true; 1345826#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1347454#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1347455#L2729-51 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1350363#L1578-7 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1345632#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1345634#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1347633#L1238-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1345739#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1345740#L2729-52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1347435#L1578-8 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1347436#L962-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1350354#L2702-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1344729#L2729-54 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1347913#L935-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1344620#L947-5 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1350486#L979-2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1345662#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 1345664#L1206-6 assume !(1 == ~doorState~0); 1367595#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1343453#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1343454#L2729-55 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1345094#L1578-9 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1349718#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1367547#L293-9 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1367546#L858-4 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1351051#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1351052#L902-6 assume !(1 == ~currentHeading~0); 1367488#L912-18 assume !(0 == ~currentFloorID~0); 1347269#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1345805#L918-13 assume { :end_inline_continueInDirection } true; 1345231#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1346609#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1347298#L2729-77 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1347299#L1578-11 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1348832#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1347369#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1347370#L1238-2 assume { :end_inline_timeShift } true; 1350408#L2400 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1350409#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1343428#L2213-1 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1343429#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 1346134#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1343678#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1348668#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1350180#L2777-5 assume { :end_inline_callOnFloor } true; 1366509#L3117-1 assume { :end_inline_initPersonOnFloor } true; 1366507#L2333 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1366506#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1366404#L2729-78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1361915#L1578-12 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1361908#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1361906#L293-12 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1361907#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1360487#L979-3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1360485#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 1360482#L1206-9 assume !(1 == ~doorState~0); 1360481#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1360478#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1360472#L2729-81 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1360469#L1578-13 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1360467#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1360404#L293-13 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1360403#L858-6 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1360402#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1348440#L902-9 assume !(1 == ~currentHeading~0); 1348442#L912-27 assume !(0 == ~currentFloorID~0); 1350672#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1350673#L918-19 assume { :end_inline_continueInDirection } true; 1345005#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1345006#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1369600#L2729-103 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1369598#L1578-15 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1369599#L1697-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1379624#L293-15 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 1379623#L1587-3 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 1379620#L1702-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 1379619#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1379618#L1238-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1379615#L2415-2 assume !false; 1379616#L2416 [2022-07-14 15:43:59,006 INFO L754 eck$LassoCheckResult]: Loop: 1379616#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1399069#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1399068#L140 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 1399067#L2423 assume 1 != cleanup_~tmp___0~11#1; 1399066#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1399065#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1399064#L2729-104 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 1399063#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1399062#L465 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1399061#L478 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 1399060#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1399058#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1390983#L2729-109 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1399053#L1578-16 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1399052#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1399051#L293-16 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1399049#L966-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1399044#L2702-110 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1398955#L2729-110 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1398956#L935-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1399040#L947-8 stopRequestedAtCurrentFloor_#t~ret31#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1399039#L979-4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1399037#L1115-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1399038#L1117-8 assume !(0 != ~persons_0~0); 1400123#L1117-9 assume !(0 != ~persons_1~0); 1400094#L1131-4 assume !(0 != ~persons_2~0); 1400082#L1145-4 assume !(0 != ~persons_3~0); 1400079#L1159-4 assume !(0 != ~persons_4~0); 1400074#L1173-4 assume !(0 != ~persons_5~0); 1399986#L1187-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~5#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~5#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1399985#L2793-48 assume 0 == isPersonOnFloor_~floor#1; 1399970#L2794-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1399951#L2965-24 processWaitingOnFloor_#t~ret33#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~5#1 := processWaitingOnFloor_#t~ret33#1;havoc processWaitingOnFloor_#t~ret33#1; 1399948#L1016-12 assume !(0 != processWaitingOnFloor_~tmp___0~5#1); 1399541#L1016-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1399533#L2793-50 assume 0 == isPersonOnFloor_~floor#1; 1399534#L2794-25 assume !(0 == isPersonOnFloor_~person#1); 1399518#L2798-25 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1399493#L2965-25 processWaitingOnFloor_#t~ret35#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret35#1;havoc processWaitingOnFloor_#t~ret35#1; 1399491#L1029-12 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1399489#L1029-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1399487#L2793-52 assume 0 == isPersonOnFloor_~floor#1; 1399488#L2794-26 assume !(0 == isPersonOnFloor_~person#1); 1399382#L2798-26 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1399379#L2965-26 processWaitingOnFloor_#t~ret37#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret37#1;havoc processWaitingOnFloor_#t~ret37#1; 1399376#L1042-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1399372#L1042-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1399369#L2793-54 assume 0 == isPersonOnFloor_~floor#1; 1399368#L2794-27 assume !(0 == isPersonOnFloor_~person#1); 1399258#L2798-27 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1399243#L2965-27 processWaitingOnFloor_#t~ret39#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret39#1;havoc processWaitingOnFloor_#t~ret39#1; 1399238#L1055-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1399232#L1055-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1399229#L2793-56 assume 0 == isPersonOnFloor_~floor#1; 1399230#L2794-28 assume !(0 == isPersonOnFloor_~person#1); 1399192#L2798-28 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1399179#L2965-28 processWaitingOnFloor_#t~ret41#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret41#1;havoc processWaitingOnFloor_#t~ret41#1; 1399177#L1068-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1399175#L1068-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1399168#L2793-58 assume 0 == isPersonOnFloor_~floor#1; 1399169#L2794-29 assume !(0 == isPersonOnFloor_~person#1); 1399143#L2798-29 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1399119#L2965-29 processWaitingOnFloor_#t~ret43#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret43#1;havoc processWaitingOnFloor_#t~ret43#1; 1399116#L1081-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1399114#L1081-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1399112#L2737-68 assume !(0 == resetCallOnFloor_~floorID#1); 1399110#L2740-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 1399107#L2749-104 assume { :end_inline_resetCallOnFloor } true; 1399106#L1094-4 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1399105#L264-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1399100#L276-14 assume { :end_inline_resetFloorButton } true; 1399096#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1399095#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1391111#L2729-134 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1399094#L1578-19 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1399093#L1697-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1399092#L293-19 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 1399091#L1587-4 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 1399089#L1702-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 1399087#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1399086#L1238-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1399085#L2415-2 assume !false; 1379616#L2416 [2022-07-14 15:43:59,007 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:43:59,007 INFO L85 PathProgramCache]: Analyzing trace with hash -1775678488, now seen corresponding path program 3 times [2022-07-14 15:43:59,007 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:43:59,007 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1704062104] [2022-07-14 15:43:59,007 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:43:59,008 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:43:59,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:43:59,054 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:43:59,054 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:43:59,054 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1704062104] [2022-07-14 15:43:59,054 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1704062104] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:43:59,054 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:43:59,054 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-14 15:43:59,055 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1177305975] [2022-07-14 15:43:59,055 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:43:59,055 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:43:59,055 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:43:59,055 INFO L85 PathProgramCache]: Analyzing trace with hash 1488176235, now seen corresponding path program 1 times [2022-07-14 15:43:59,056 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:43:59,056 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [290384553] [2022-07-14 15:43:59,056 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:43:59,056 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:43:59,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:43:59,071 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:43:59,071 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:43:59,071 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [290384553] [2022-07-14 15:43:59,071 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [290384553] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:43:59,072 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:43:59,072 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:43:59,072 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [555384493] [2022-07-14 15:43:59,072 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:43:59,072 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:43:59,072 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:43:59,073 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-14 15:43:59,073 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 15:43:59,073 INFO L87 Difference]: Start difference. First operand 66801 states and 122603 transitions. cyclomatic complexity: 55820 Second operand has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:44:00,260 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:44:00,260 INFO L93 Difference]: Finished difference Result 99298 states and 180779 transitions. [2022-07-14 15:44:00,260 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-14 15:44:00,263 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 99298 states and 180779 transitions.