./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec14_product03.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version ff03de63 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec14_product03.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 8ed4163e8f042a84d9cdccd4fee3ee0ba89fdce83cd991779acec4a51d9a650c --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 22:23:41,914 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 22:23:41,941 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 22:23:41,974 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 22:23:41,975 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 22:23:41,977 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 22:23:41,978 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 22:23:41,980 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 22:23:41,981 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 22:23:41,984 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 22:23:41,985 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 22:23:41,986 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 22:23:41,986 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 22:23:41,988 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 22:23:41,989 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 22:23:41,991 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 22:23:41,991 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 22:23:41,992 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 22:23:41,994 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 22:23:41,997 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 22:23:41,998 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 22:23:41,999 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 22:23:42,000 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 22:23:42,001 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 22:23:42,005 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 22:23:42,006 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 22:23:42,006 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 22:23:42,007 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 22:23:42,007 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 22:23:42,008 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 22:23:42,008 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 22:23:42,009 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 22:23:42,010 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 22:23:42,010 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 22:23:42,011 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 22:23:42,012 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 22:23:42,012 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 22:23:42,012 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 22:23:42,012 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 22:23:42,013 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 22:23:42,013 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 22:23:42,015 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-12-21 22:23:42,040 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 22:23:42,040 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 22:23:42,041 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 22:23:42,041 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 22:23:42,042 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 22:23:42,042 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 22:23:42,042 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 22:23:42,042 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-12-21 22:23:42,042 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-12-21 22:23:42,043 INFO L138 SettingsManager]: * Use old map elimination=false [2021-12-21 22:23:42,043 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-12-21 22:23:42,044 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-12-21 22:23:42,044 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-12-21 22:23:42,044 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 22:23:42,044 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-21 22:23:42,044 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-12-21 22:23:42,044 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-21 22:23:42,044 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-21 22:23:42,045 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 22:23:42,045 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-12-21 22:23:42,045 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-12-21 22:23:42,045 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-12-21 22:23:42,045 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-21 22:23:42,045 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 22:23:42,046 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-12-21 22:23:42,046 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 22:23:42,046 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-12-21 22:23:42,046 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 22:23:42,046 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 22:23:42,046 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 22:23:42,046 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-21 22:23:42,047 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 22:23:42,048 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-12-21 22:23:42,048 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8ed4163e8f042a84d9cdccd4fee3ee0ba89fdce83cd991779acec4a51d9a650c [2021-12-21 22:23:42,246 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 22:23:42,263 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 22:23:42,265 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 22:23:42,266 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 22:23:42,266 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 22:23:42,267 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec14_product03.cil.c [2021-12-21 22:23:42,316 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d1ed961c8/3975e179967c4bcdbe599de598f81a3a/FLAG692624eeb [2021-12-21 22:23:42,770 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 22:23:42,770 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec14_product03.cil.c [2021-12-21 22:23:42,804 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d1ed961c8/3975e179967c4bcdbe599de598f81a3a/FLAG692624eeb [2021-12-21 22:23:42,815 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d1ed961c8/3975e179967c4bcdbe599de598f81a3a [2021-12-21 22:23:42,817 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 22:23:42,818 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 22:23:42,820 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 22:23:42,820 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 22:23:42,822 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 22:23:42,823 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 10:23:42" (1/1) ... [2021-12-21 22:23:42,824 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2b6bd94f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:42, skipping insertion in model container [2021-12-21 22:23:42,824 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 10:23:42" (1/1) ... [2021-12-21 22:23:42,829 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 22:23:42,887 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 22:23:43,275 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec14_product03.cil.c[68958,68971] [2021-12-21 22:23:43,275 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 22:23:43,290 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 22:23:43,401 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec14_product03.cil.c[68958,68971] [2021-12-21 22:23:43,401 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 22:23:43,417 INFO L208 MainTranslator]: Completed translation [2021-12-21 22:23:43,418 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:43 WrapperNode [2021-12-21 22:23:43,418 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 22:23:43,418 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 22:23:43,419 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 22:23:43,419 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 22:23:43,443 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:43" (1/1) ... [2021-12-21 22:23:43,462 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:43" (1/1) ... [2021-12-21 22:23:43,664 INFO L137 Inliner]: procedures = 89, calls = 329, calls flagged for inlining = 182, calls inlined = 571, statements flattened = 18930 [2021-12-21 22:23:43,664 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 22:23:43,665 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 22:23:43,665 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 22:23:43,665 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 22:23:43,671 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:43" (1/1) ... [2021-12-21 22:23:43,671 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:43" (1/1) ... [2021-12-21 22:23:43,705 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:43" (1/1) ... [2021-12-21 22:23:43,706 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:43" (1/1) ... [2021-12-21 22:23:43,821 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:43" (1/1) ... [2021-12-21 22:23:43,952 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:43" (1/1) ... [2021-12-21 22:23:43,975 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:43" (1/1) ... [2021-12-21 22:23:44,013 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 22:23:44,014 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 22:23:44,014 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 22:23:44,015 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 22:23:44,016 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:43" (1/1) ... [2021-12-21 22:23:44,021 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:23:44,029 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 22:23:44,041 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-21 22:23:44,079 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-12-21 22:23:44,101 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 22:23:44,102 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-21 22:23:44,102 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 22:23:44,102 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 22:23:44,253 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 22:23:44,254 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 22:23:49,322 INFO L275 CfgBuilder]: Performing block encoding [2021-12-21 22:23:49,354 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-21 22:23:49,354 INFO L299 CfgBuilder]: Removed 1 assume(true) statements. [2021-12-21 22:23:49,360 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 10:23:49 BoogieIcfgContainer [2021-12-21 22:23:49,361 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-21 22:23:49,362 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-12-21 22:23:49,362 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-12-21 22:23:49,364 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-12-21 22:23:49,365 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-21 22:23:49,365 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 21.12 10:23:42" (1/3) ... [2021-12-21 22:23:49,365 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@664b6209 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 21.12 10:23:49, skipping insertion in model container [2021-12-21 22:23:49,366 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-21 22:23:49,366 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 10:23:43" (2/3) ... [2021-12-21 22:23:49,366 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@664b6209 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 21.12 10:23:49, skipping insertion in model container [2021-12-21 22:23:49,366 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-21 22:23:49,366 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 10:23:49" (3/3) ... [2021-12-21 22:23:49,367 INFO L388 chiAutomizerObserver]: Analyzing ICFG elevator_spec14_product03.cil.c [2021-12-21 22:23:49,396 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-12-21 22:23:49,396 INFO L360 BuchiCegarLoop]: Hoare is false [2021-12-21 22:23:49,396 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-12-21 22:23:49,396 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-12-21 22:23:49,396 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-12-21 22:23:49,396 INFO L364 BuchiCegarLoop]: Difference is false [2021-12-21 22:23:49,396 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-12-21 22:23:49,396 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-12-21 22:23:49,462 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5556 states, 5555 states have (on average 1.8763276327632763) internal successors, (10423), 5555 states have internal predecessors, (10423), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:23:49,556 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1127 [2021-12-21 22:23:49,556 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:23:49,556 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:23:49,569 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:23:49,569 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:23:49,570 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-12-21 22:23:49,581 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5556 states, 5555 states have (on average 1.8763276327632763) internal successors, (10423), 5555 states have internal predecessors, (10423), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:23:49,630 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1127 [2021-12-21 22:23:49,631 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:23:49,631 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:23:49,634 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:23:49,634 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:23:49,640 INFO L791 eck$LassoCheckResult]: Stem: 3497#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 5433#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~7#1, main_~tmp~11#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 4929#L1735true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5110#L1728true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 5312#L1743true main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret27#1;havoc main_#t~ret27#1; 5351#L1333true assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 3544#L1307true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret20#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 3100#L95true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 2668#L120true bigMacCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret20#1;havoc bigMacCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5448#L628true assume 0 == initPersonOnFloor_~floor#1; 3209#L629true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 986#L736-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 4368#L420true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 574#L432-2true assume { :end_inline_callOnFloor } true; 3160#L772true assume { :end_inline_initPersonOnFloor } true; 4070#L1111true assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 436#L357true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3333#L384true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 4058#L3231true stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 3040#L2616true assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3885#L1947true stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1149#L2620true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 3953#L2633true timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 5551#L2768true assume !(0 != timeShift_~tmp___9~2#1); 123#L2859true assume !(1 == ~doorState~0); 4791#L2859-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5151#L357-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1497#L384-3true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1142#L3231-1true stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 1410#L2499true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 350#L1947-1true stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 2430#L2512true timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 4860#L2867true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 211#L2556true assume !(1 == ~currentHeading~0); 1351#L2566true assume !(0 == ~currentFloorID~0); 1109#L2566-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2190#L2572-1true assume { :end_inline_continueInDirection } true; 3262#L2876-2true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2609#L357-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1824#L384-25true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 683#L3231-3true __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 2322#L951true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 5241#L951-1true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 848#L2891true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 4152#L357-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3593#L384-26true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1876#L3231-4true stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 2356#L2616-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 4056#L1947-4true stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 2751#L2620-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 4304#L2633-1true timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 867#L2768-2true assume !(0 != timeShift_~tmp___9~2#1); 946#L2859-3true assume !(1 == ~doorState~0); 4283#L2859-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2639#L357-29true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 4927#L384-29true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 242#L3231-5true stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 1193#L2499-2true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1753#L1947-5true stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 4674#L2512-2true timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 2074#L2867-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 3695#L2556-3true assume !(1 == ~currentHeading~0); 3769#L2566-9true assume !(0 == ~currentFloorID~0); 5531#L2566-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1761#L2572-7true assume { :end_inline_continueInDirection } true; 5263#L2876-5true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2619#L357-51true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2312#L384-51true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 4840#L3231-7true __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 2937#L951-2true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 3087#L951-3true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 253#L2891-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 649#L357-52true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3770#L384-52true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1141#L3231-8true stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 121#L2616-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 40#L1947-8true stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 5211#L2620-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 2406#L2633-2true timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 1914#L2768-4true assume !(0 != timeShift_~tmp___9~2#1); 327#L2859-6true assume !(1 == ~doorState~0); 756#L2859-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5387#L357-55true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1720#L384-55true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2250#L3231-9true stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 3427#L2499-4true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3024#L1947-9true stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 3818#L2512-4true timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 3889#L2867-4true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 2920#L2556-6true assume !(1 == ~currentHeading~0); 4551#L2566-18true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1373#L2566-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 404#L2572-13true assume { :end_inline_continueInDirection } true; 3463#L2876-8true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 463#L357-77true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 230#L384-77true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 3945#L3231-11true __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 1293#L951-4true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 2735#L951-5true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 906#L2891-2true assume { :end_inline_timeShift } true; 1258#L1123true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret15#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 114#L95-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1118#L120-1true bobCall_#t~ret15#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret15#1;havoc bobCall_#t~ret15#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2733#L628-1true assume 0 == initPersonOnFloor_~floor#1; 2624#L629-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1236#L736-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2291#L420-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 480#L432-5true assume { :end_inline_callOnFloor } true; 4024#L772-1true assume { :end_inline_initPersonOnFloor } true; 4404#L1056true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret21#1, cleanup_#t~ret22#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 3836#L357-78true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1928#L384-78true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1905#L3231-12true stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 2271#L2616-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2393#L1947-12true stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 2857#L2620-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 4343#L2633-3true timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 4478#L2768-6true assume !(0 != timeShift_~tmp___9~2#1); 3855#L2859-9true assume !(1 == ~doorState~0); 3721#L2859-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2186#L357-81true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 797#L384-81true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1154#L3231-13true stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 646#L2499-6true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2321#L1947-13true stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 4751#L2512-6true timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1014#L2867-6true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 2392#L2556-9true assume !(1 == ~currentHeading~0); 2774#L2566-27true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1963#L2566-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2080#L2572-19true assume { :end_inline_continueInDirection } true; 2050#L2876-11true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1797#L357-103true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 4719#L384-103true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 62#L3231-15true __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 2203#L951-6true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1710#L951-7true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1265#L2891-3true assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 3604#L1139-2true [2021-12-21 22:23:49,642 INFO L793 eck$LassoCheckResult]: Loop: 3604#L1139-2true assume !false; 4406#L1140true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2213#L1143true assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 5083#L1818true cleanup_#t~ret21#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret21#1;havoc cleanup_#t~ret21#1; 5229#L1147true assume 1 != cleanup_~tmp___0~3#1; 827#L1147-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret57#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5218#L357-104true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 813#L384-104true anyStopRequested_#t~ret52#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret52#1;havoc anyStopRequested_#t~ret52#1; 1898#L2055true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 556#L2119true isIdle_#t~ret57#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret57#1;havoc isIdle_#t~ret57#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 4744#L2132true cleanup_#t~ret22#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 5048#L1159true assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1325#L357-109true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1631#L384-109true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2183#L3231-16true stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 5485#L2616-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2146#L1947-16true stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 4961#L2620-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 2119#L2633-4true timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 4854#L2768-8true assume !(0 != timeShift_~tmp___9~2#1); 2254#L2859-12true assume 1 == ~doorState~0;~doorState~0 := 0; 642#L2859-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 4745#L357-112true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 4476#L384-112true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 4738#L3231-17true stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 5335#L2499-8true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1206#L1947-17true stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 4225#L2512-8true timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 3546#L2867-8true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 5052#L2556-12true assume !(1 == ~currentHeading~0); 1748#L2566-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2435#L2566-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2517#L2572-25true assume { :end_inline_continueInDirection } true; 3133#L2876-14true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 4528#L357-134true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 961#L384-134true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 5091#L3231-19true __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 4534#L951-8true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 2536#L951-9true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1657#L2891-4true assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 3604#L1139-2true [2021-12-21 22:23:49,646 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:23:49,646 INFO L85 PathProgramCache]: Analyzing trace with hash -811112520, now seen corresponding path program 1 times [2021-12-21 22:23:49,652 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:23:49,653 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1692776350] [2021-12-21 22:23:49,653 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:23:49,654 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:23:49,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:23:49,828 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:23:49,829 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:23:49,829 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1692776350] [2021-12-21 22:23:49,829 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1692776350] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:23:49,829 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:23:49,830 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 22:23:49,831 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1937142972] [2021-12-21 22:23:49,831 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:23:49,834 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:23:49,835 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:23:49,835 INFO L85 PathProgramCache]: Analyzing trace with hash 98413491, now seen corresponding path program 1 times [2021-12-21 22:23:49,835 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:23:49,835 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [872416526] [2021-12-21 22:23:49,835 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:23:49,836 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:23:49,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:23:49,895 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:23:49,896 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:23:49,896 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [872416526] [2021-12-21 22:23:49,896 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [872416526] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:23:49,896 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:23:49,896 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 22:23:49,897 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1590038597] [2021-12-21 22:23:49,897 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:23:49,898 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-21 22:23:49,898 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:23:49,917 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 22:23:49,918 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-21 22:23:49,930 INFO L87 Difference]: Start difference. First operand has 5556 states, 5555 states have (on average 1.8763276327632763) internal successors, (10423), 5555 states have internal predecessors, (10423), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 7 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:23:56,541 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:23:56,541 INFO L93 Difference]: Finished difference Result 47197 states and 88169 transitions. [2021-12-21 22:23:56,542 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-21 22:23:56,545 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 47197 states and 88169 transitions. [2021-12-21 22:23:56,818 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 10279 [2021-12-21 22:23:57,025 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 47197 states to 47089 states and 88049 transitions. [2021-12-21 22:23:57,026 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 47089 [2021-12-21 22:23:57,082 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 47089 [2021-12-21 22:23:57,083 INFO L73 IsDeterministic]: Start isDeterministic. Operand 47089 states and 88049 transitions. [2021-12-21 22:23:57,142 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-21 22:23:57,143 INFO L681 BuchiCegarLoop]: Abstraction has 47089 states and 88049 transitions. [2021-12-21 22:23:57,184 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47089 states and 88049 transitions. [2021-12-21 22:23:57,703 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47089 to 16016. [2021-12-21 22:23:57,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16016 states, 16016 states have (on average 1.8679445554445555) internal successors, (29917), 16015 states have internal predecessors, (29917), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:23:57,768 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16016 states to 16016 states and 29917 transitions. [2021-12-21 22:23:57,769 INFO L704 BuchiCegarLoop]: Abstraction has 16016 states and 29917 transitions. [2021-12-21 22:23:57,770 INFO L587 BuchiCegarLoop]: Abstraction has 16016 states and 29917 transitions. [2021-12-21 22:23:57,770 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-12-21 22:23:57,770 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16016 states and 29917 transitions. [2021-12-21 22:23:57,817 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3276 [2021-12-21 22:23:57,817 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:23:57,817 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:23:57,826 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:23:57,826 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:23:57,827 INFO L791 eck$LassoCheckResult]: Stem: 57813#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 57814#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~7#1, main_~tmp~11#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 58501#L1735 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 58502#L1728 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 58545#L1743 main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret27#1;havoc main_#t~ret27#1; 58588#L1333 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 57854#L1307 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret20#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 57528#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 54649#L120 bigMacCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret20#1;havoc bigMacCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 57127#L628 assume 0 == initPersonOnFloor_~floor#1; 57610#L629 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 53379#L736-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 54864#L420 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 54094#L432-2 assume { :end_inline_callOnFloor } true; 54095#L772 assume { :end_inline_initPersonOnFloor } true; 57575#L1111 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 53817#L357 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 53818#L384 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 58686#L3231 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 58674#L2616 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 58663#L1947 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 58646#L2620 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 58647#L2633 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 63480#L2768 assume !(0 != timeShift_~tmp___9~2#1); 63481#L2859 assume !(1 == ~doorState~0); 68350#L2859-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 68349#L357-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 68348#L384-3 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 68347#L3231-1 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 68345#L2499 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 68346#L1947-1 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 68354#L2512 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 68352#L2867 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 68351#L2556 assume !(1 == ~currentHeading~0); 55442#L2566 assume !(0 == ~currentFloorID~0); 52963#L2566-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 55062#L2572-1 assume { :end_inline_continueInDirection } true; 55516#L2876-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 57060#L357-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 56123#L384-25 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 56124#L3231-3 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 62892#L951 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 62884#L951-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 60685#L2891 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 59059#L357-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 58882#L384-26 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 58995#L3231-4 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 58901#L2616-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 58900#L1947-4 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 58899#L2620-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 57202#L2633-1 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 64233#L2768-2 assume !(0 != timeShift_~tmp___9~2#1); 64234#L2859-3 assume !(1 == ~doorState~0); 68691#L2859-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 68690#L357-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 68689#L384-29 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 68688#L3231-5 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 68686#L2499-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 56024#L1947-5 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 56025#L2512-2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 56430#L2867-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 56431#L2556-3 assume !(1 == ~currentHeading~0); 57965#L2566-9 assume !(0 == ~currentFloorID~0); 58001#L2566-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 56038#L2572-7 assume { :end_inline_continueInDirection } true; 53470#L2876-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 57071#L357-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 56728#L384-51 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 56729#L3231-7 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 62888#L951-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 62883#L951-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 58970#L2891-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 58967#L357-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 58874#L384-52 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 58947#L3231-8 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 58908#L2616-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 58907#L1947-8 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 58906#L2620-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 58571#L2633-2 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 65411#L2768-4 assume !(0 != timeShift_~tmp___9~2#1); 65412#L2859-6 assume !(1 == ~doorState~0); 68586#L2859-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 68585#L357-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 68584#L384-55 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 68583#L3231-9 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 68581#L2499-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 57461#L1947-9 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 55314#L2512-4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 58024#L2867-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 57354#L2556-6 assume !(1 == ~currentHeading~0); 57356#L2566-18 assume !(0 == ~currentFloorID~0); 55234#L2566-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53754#L2572-13 assume { :end_inline_continueInDirection } true; 53755#L2876-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 53874#L357-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 53368#L384-77 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 53369#L3231-11 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 55352#L951-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 55353#L951-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 54722#L2891-2 assume { :end_inline_timeShift } true; 54723#L1123 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret15#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 53091#L95-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 53092#L120-1 bobCall_#t~ret15#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret15#1;havoc bobCall_#t~ret15#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 55079#L628-1 assume 0 == initPersonOnFloor_~floor#1; 57076#L629-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 52947#L736-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 55263#L420-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 53907#L432-5 assume { :end_inline_callOnFloor } true; 53908#L772-1 assume { :end_inline_initPersonOnFloor } true; 58128#L1056 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret21#1, cleanup_#t~ret22#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 58032#L357-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 56260#L384-78 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 56261#L3231-12 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 58806#L2616-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 58800#L1947-12 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 58798#L2620-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 57301#L2633-3 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 67834#L2768-6 assume !(0 != timeShift_~tmp___9~2#1); 67835#L2859-9 assume !(1 == ~doorState~0); 68399#L2859-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 68398#L357-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 68397#L384-81 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 68396#L3231-13 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 68394#L2499-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 56740#L1947-13 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 56741#L2512-6 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 54904#L2867-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 54906#L2556-9 assume !(1 == ~currentHeading~0); 56823#L2566-27 assume !(0 == ~currentFloorID~0); 55950#L2566-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 56306#L2572-19 assume { :end_inline_continueInDirection } true; 56395#L2876-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 56087#L357-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 56088#L384-103 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 52953#L3231-15 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 52954#L951-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 54603#L951-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 55309#L2891-3 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 55310#L1139-2 [2021-12-21 22:23:57,828 INFO L793 eck$LassoCheckResult]: Loop: 55310#L1139-2 assume !false; 57896#L1140 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 56605#L1143 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 56606#L1818 cleanup_#t~ret21#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret21#1;havoc cleanup_#t~ret21#1; 58541#L1147 assume 1 != cleanup_~tmp___0~3#1; 54588#L1147-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret57#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 54589#L357-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 54563#L384-104 anyStopRequested_#t~ret52#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret52#1;havoc anyStopRequested_#t~ret52#1; 54564#L2055 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 54053#L2119 isIdle_#t~ret57#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret57#1;havoc isIdle_#t~ret57#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 54054#L2132 cleanup_#t~ret22#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 58445#L1159 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 55403#L357-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 55404#L384-109 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 55835#L3231-16 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 56570#L2616-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 58624#L1947-16 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 58869#L2620-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 58508#L2633-4 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 67096#L2768-8 assume !(0 != timeShift_~tmp___9~2#1); 67097#L2859-12 assume 1 == ~doorState~0;~doorState~0 := 0; 68604#L2859-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 68603#L357-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 68602#L384-112 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 68601#L3231-17 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 68599#L2499-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 55212#L1947-17 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 55213#L2512-8 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 57855#L2867-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 57856#L2556-12 assume !(1 == ~currentHeading~0); 56013#L2566-36 assume !(0 == ~currentFloorID~0); 56014#L2566-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 56868#L2572-25 assume { :end_inline_continueInDirection } true; 56956#L2876-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 57551#L357-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 54818#L384-134 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 54819#L3231-19 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 58368#L951-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 55191#L951-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 55876#L2891-4 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 55310#L1139-2 [2021-12-21 22:23:57,829 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:23:57,829 INFO L85 PathProgramCache]: Analyzing trace with hash 735022516, now seen corresponding path program 1 times [2021-12-21 22:23:57,830 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:23:57,830 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1572324230] [2021-12-21 22:23:57,830 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:23:57,831 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:23:57,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:23:57,929 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:23:57,930 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:23:57,930 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1572324230] [2021-12-21 22:23:57,930 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1572324230] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:23:57,930 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:23:57,930 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 22:23:57,931 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1587073140] [2021-12-21 22:23:57,931 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:23:57,931 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:23:57,932 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:23:57,932 INFO L85 PathProgramCache]: Analyzing trace with hash -294613519, now seen corresponding path program 1 times [2021-12-21 22:23:57,932 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:23:57,932 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1868953603] [2021-12-21 22:23:57,932 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:23:57,933 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:23:57,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:23:57,952 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:23:57,952 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:23:57,953 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1868953603] [2021-12-21 22:23:57,953 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1868953603] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:23:57,953 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:23:57,953 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 22:23:57,953 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [616689051] [2021-12-21 22:23:57,953 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:23:57,954 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-21 22:23:57,954 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:23:57,954 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 22:23:57,954 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 22:23:57,955 INFO L87 Difference]: Start difference. First operand 16016 states and 29917 transitions. cyclomatic complexity: 13903 Second operand has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 3 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:23:58,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:23:58,221 INFO L93 Difference]: Finished difference Result 28766 states and 53684 transitions. [2021-12-21 22:23:58,221 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 22:23:58,222 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28766 states and 53684 transitions. [2021-12-21 22:23:58,345 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6524 [2021-12-21 22:23:58,448 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28766 states to 28766 states and 53684 transitions. [2021-12-21 22:23:58,448 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28766 [2021-12-21 22:23:58,672 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28766 [2021-12-21 22:23:58,672 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28766 states and 53684 transitions. [2021-12-21 22:23:58,688 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-21 22:23:58,692 INFO L681 BuchiCegarLoop]: Abstraction has 28766 states and 53684 transitions. [2021-12-21 22:23:58,706 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28766 states and 53684 transitions. [2021-12-21 22:23:58,957 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28766 to 28734. [2021-12-21 22:23:58,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28734 states, 28734 states have (on average 1.8666388250852648) internal successors, (53636), 28733 states have internal predecessors, (53636), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:23:59,050 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28734 states to 28734 states and 53636 transitions. [2021-12-21 22:23:59,051 INFO L704 BuchiCegarLoop]: Abstraction has 28734 states and 53636 transitions. [2021-12-21 22:23:59,051 INFO L587 BuchiCegarLoop]: Abstraction has 28734 states and 53636 transitions. [2021-12-21 22:23:59,051 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-12-21 22:23:59,051 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28734 states and 53636 transitions. [2021-12-21 22:23:59,239 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6516 [2021-12-21 22:23:59,239 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:23:59,239 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:23:59,242 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:23:59,242 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:23:59,242 INFO L791 eck$LassoCheckResult]: Stem: 102678#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 102679#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~7#1, main_~tmp~11#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 103448#L1735 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 103449#L1728 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 103502#L1743 main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret27#1;havoc main_#t~ret27#1; 103550#L1333 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 102723#L1307 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret20#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 102381#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 99452#L120 bigMacCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret20#1;havoc bigMacCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 101964#L628 assume 0 == initPersonOnFloor_~floor#1; 102466#L629 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 98168#L736-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 99662#L420 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 98889#L432-2 assume { :end_inline_callOnFloor } true; 98890#L772 assume { :end_inline_initPersonOnFloor } true; 102428#L1111 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 98608#L357 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 98609#L384 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 103611#L3231 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 103609#L2616 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 103606#L1947 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 103604#L2620 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 102985#L2633 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 102986#L2768 assume !(0 != timeShift_~tmp___9~2#1); 97901#L2859 assume !(1 == ~doorState~0); 97902#L2859-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 103394#L357-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 100479#L384-3 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 99918#L3231-1 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 99919#L2499 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 98427#L1947-1 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 98428#L2512 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 101690#L2867 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 98108#L2556 assume !(1 == ~currentHeading~0); 98110#L2566 assume !(0 == ~currentFloorID~0); 97752#L2566-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 108020#L2572-1 assume { :end_inline_continueInDirection } true; 111183#L2876-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 101897#L357-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 100940#L384-25 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 99108#L3231-3 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 99109#L951 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 98550#L951-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 99425#L2891 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 99426#L357-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 102760#L384-26 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 101006#L3231-4 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 101007#L2616-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 101605#L1947-4 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 102039#L2620-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 102040#L2633-1 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 99458#L2768-2 assume !(0 != timeShift_~tmp___9~2#1); 99459#L2859-3 assume !(1 == ~doorState~0); 114426#L2859-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 114425#L357-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 103447#L384-29 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 98186#L3231-5 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 98187#L2499-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 100002#L1947-5 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 100841#L2512-2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 101247#L2867-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 101249#L2556-3 assume !(1 == ~currentHeading~0); 102844#L2566-9 assume !(0 == ~currentFloorID~0); 102887#L2566-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 103595#L2572-7 assume { :end_inline_continueInDirection } true; 111269#L2876-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 111268#L357-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 103654#L384-51 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 111267#L3231-7 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 111262#L951-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 111260#L951-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 111259#L2891-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 111258#L357-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 105411#L384-52 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 111257#L3231-8 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 111255#L2616-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 111254#L1947-8 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 109951#L2620-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 101669#L2633-2 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 101058#L2768-4 assume !(0 != timeShift_~tmp___9~2#1); 98374#L2859-6 assume !(1 == ~doorState~0); 98375#L2859-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 99250#L357-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 100788#L384-55 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 100789#L3231-9 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 101479#L2499-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 102621#L1947-9 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 102911#L2512-4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 102912#L2867-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 102200#L2556-6 assume !(1 == ~currentHeading~0); 102201#L2566-18 assume !(0 == ~currentFloorID~0); 100042#L2566-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 100289#L2572-13 assume { :end_inline_continueInDirection } true; 112374#L2876-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 112373#L357-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 104612#L384-77 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 112371#L3231-11 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 112367#L951-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 112365#L951-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 112364#L2891-2 assume { :end_inline_timeShift } true; 112363#L1123 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret15#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 112362#L95-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 112356#L120-1 bobCall_#t~ret15#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret15#1;havoc bobCall_#t~ret15#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 112352#L628-1 assume 0 == initPersonOnFloor_~floor#1; 112328#L629-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 112312#L736-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 112307#L420-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 112301#L432-5 assume { :end_inline_callOnFloor } true; 112299#L772-1 assume { :end_inline_initPersonOnFloor } true; 112298#L1056 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret21#1, cleanup_#t~ret22#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 111994#L357-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 104281#L384-78 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 109957#L3231-12 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 109953#L2616-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 109954#L1947-12 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 112254#L2620-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 102143#L2633-3 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 103200#L2768-6 assume !(0 != timeShift_~tmp___9~2#1); 102933#L2859-9 assume !(1 == ~doorState~0); 102859#L2859-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 101397#L357-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 101398#L384-81 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 115616#L3231-13 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 115608#L2499-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 101565#L1947-13 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 101566#L2512-6 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 99702#L2867-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 99704#L2556-9 assume !(1 == ~currentHeading~0); 101651#L2566-27 assume !(0 == ~currentFloorID~0); 100766#L2566-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 101122#L2572-19 assume { :end_inline_continueInDirection } true; 101211#L2876-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 100903#L357-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 100904#L384-103 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 123103#L3231-15 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 123099#L951-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 123093#L951-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 123090#L2891-3 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 123089#L1139-2 [2021-12-21 22:23:59,243 INFO L793 eck$LassoCheckResult]: Loop: 123089#L1139-2 assume !false; 123088#L1140 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 101430#L1143 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 101431#L1818 cleanup_#t~ret21#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret21#1;havoc cleanup_#t~ret21#1; 103495#L1147 assume 1 != cleanup_~tmp___0~3#1; 99390#L1147-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret57#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 99391#L357-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 99366#L384-104 anyStopRequested_#t~ret52#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret52#1;havoc anyStopRequested_#t~ret52#1; 99367#L2055 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 98848#L2119 isIdle_#t~ret57#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret57#1;havoc isIdle_#t~ret57#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 98849#L2132 cleanup_#t~ret22#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 103375#L1159 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 103479#L357-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 115547#L384-109 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 115546#L3231-16 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 115544#L2616-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 115543#L1947-16 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 115542#L2620-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 101314#L2633-4 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 101315#L2768-8 assume !(0 != timeShift_~tmp___9~2#1); 103419#L2859-12 assume 1 == ~doorState~0;~doorState~0 := 0; 121480#L2859-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 103376#L357-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 103259#L384-112 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 103260#L3231-17 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 103374#L2499-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 100017#L1947-17 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 100018#L2512-8 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 119515#L2867-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 119508#L2556-12 assume !(1 == ~currentHeading~0); 119503#L2566-36 assume !(0 == ~currentFloorID~0); 101696#L2566-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 101697#L2572-25 assume { :end_inline_continueInDirection } true; 101786#L2876-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 102406#L357-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 103284#L384-134 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 123104#L3231-19 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 123095#L951-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 123092#L951-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 123091#L2891-4 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 123089#L1139-2 [2021-12-21 22:23:59,244 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:23:59,244 INFO L85 PathProgramCache]: Analyzing trace with hash -1825840330, now seen corresponding path program 1 times [2021-12-21 22:23:59,244 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:23:59,244 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [714462210] [2021-12-21 22:23:59,245 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:23:59,245 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:23:59,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:23:59,307 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:23:59,307 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:23:59,307 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [714462210] [2021-12-21 22:23:59,307 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [714462210] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:23:59,308 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:23:59,308 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 22:23:59,308 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [306550909] [2021-12-21 22:23:59,308 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:23:59,309 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:23:59,310 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:23:59,310 INFO L85 PathProgramCache]: Analyzing trace with hash 385444851, now seen corresponding path program 1 times [2021-12-21 22:23:59,310 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:23:59,311 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [228632225] [2021-12-21 22:23:59,311 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:23:59,311 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:23:59,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:23:59,371 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:23:59,371 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:23:59,371 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [228632225] [2021-12-21 22:23:59,372 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [228632225] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:23:59,372 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:23:59,372 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-21 22:23:59,372 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1356880417] [2021-12-21 22:23:59,373 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:23:59,373 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-21 22:23:59,373 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:23:59,374 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-21 22:23:59,374 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2021-12-21 22:23:59,374 INFO L87 Difference]: Start difference. First operand 28734 states and 53636 transitions. cyclomatic complexity: 24904 Second operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:06,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:06,397 INFO L93 Difference]: Finished difference Result 277729 states and 520906 transitions. [2021-12-21 22:24:06,406 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2021-12-21 22:24:06,406 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 277729 states and 520906 transitions. [2021-12-21 22:24:07,858 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 79864 [2021-12-21 22:24:09,044 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 277729 states to 277729 states and 520906 transitions. [2021-12-21 22:24:09,044 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 277729 [2021-12-21 22:24:09,252 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 277729 [2021-12-21 22:24:09,252 INFO L73 IsDeterministic]: Start isDeterministic. Operand 277729 states and 520906 transitions. [2021-12-21 22:24:09,478 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-21 22:24:09,478 INFO L681 BuchiCegarLoop]: Abstraction has 277729 states and 520906 transitions. [2021-12-21 22:24:09,642 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 277729 states and 520906 transitions. [2021-12-21 22:24:11,225 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 277729 to 57289. [2021-12-21 22:24:11,297 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57289 states, 57289 states have (on average 1.8661523154532285) internal successors, (106910), 57288 states have internal predecessors, (106910), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:11,412 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57289 states to 57289 states and 106910 transitions. [2021-12-21 22:24:11,413 INFO L704 BuchiCegarLoop]: Abstraction has 57289 states and 106910 transitions. [2021-12-21 22:24:11,413 INFO L587 BuchiCegarLoop]: Abstraction has 57289 states and 106910 transitions. [2021-12-21 22:24:11,413 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-12-21 22:24:11,413 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 57289 states and 106910 transitions. [2021-12-21 22:24:11,744 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 12908 [2021-12-21 22:24:11,744 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:24:11,744 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:24:11,747 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:11,748 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:11,748 INFO L791 eck$LassoCheckResult]: Stem: 409354#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 409355#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~7#1, main_~tmp~11#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 410235#L1735 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 410236#L1728 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 410312#L1743 main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret27#1;havoc main_#t~ret27#1; 410399#L1333 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 409400#L1307 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret20#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 409033#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 405994#L120 bigMacCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret20#1;havoc bigMacCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 408585#L628 assume 0 == initPersonOnFloor_~floor#1; 409133#L629 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 404703#L736-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 406210#L420 assume !(0 == callOnFloor_~floorID#1); 409941#L423 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 405424#L432-2 assume { :end_inline_callOnFloor } true; 405425#L772 assume { :end_inline_initPersonOnFloor } true; 409758#L1111 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 409759#L357 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 412740#L384 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 409750#L3231 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 409751#L2616 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 409640#L1947 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 409641#L2620 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 412138#L2633 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 412139#L2768 assume !(0 != timeShift_~tmp___9~2#1); 412133#L2859 assume !(1 == ~doorState~0); 412134#L2859-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 410329#L357-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 410330#L384-3 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 406465#L3231-1 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 406466#L2499 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 404962#L1947-1 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 404963#L2512 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 408306#L2867 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 410201#L2556 assume !(1 == ~currentHeading~0); 414268#L2566 assume !(0 == ~currentFloorID~0); 404285#L2566-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 414267#L2572-1 assume { :end_inline_continueInDirection } true; 423712#L2876-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 412220#L357-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 412221#L384-25 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 405645#L3231-3 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 405646#L951 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 410370#L951-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 405965#L2891 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 405966#L357-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 416393#L384-26 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 416394#L3231-4 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 416389#L2616-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 416390#L1947-4 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 414320#L2620-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 414321#L2633-1 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 429074#L2768-2 assume !(0 != timeShift_~tmp___9~2#1); 429075#L2859-3 assume !(1 == ~doorState~0); 409896#L2859-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 409897#L357-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 410234#L384-29 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 404721#L3231-5 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 404722#L2499-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 406556#L1947-5 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 407416#L2512-2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 407850#L2867-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 407852#L2556-3 assume !(1 == ~currentHeading~0); 409527#L2566-9 assume !(0 == ~currentFloorID~0); 409576#L2566-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 410480#L2572-7 assume { :end_inline_continueInDirection } true; 428566#L2876-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 408524#L357-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 408525#L384-51 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 410194#L3231-7 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 410195#L951-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 409023#L951-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 404746#L2891-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 404747#L357-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 426128#L384-52 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 406464#L3231-8 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 404431#L2616-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 404432#L1947-8 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 414325#L2620-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 410355#L2633-2 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 430493#L2768-4 assume !(0 != timeShift_~tmp___9~2#1); 430492#L2859-6 assume !(1 == ~doorState~0); 430490#L2859-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 430491#L357-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 430487#L384-55 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 430488#L3231-9 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 430479#L2499-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 408954#L1947-9 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 406684#L2512-4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 409607#L2867-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 409645#L2556-6 assume !(1 == ~currentHeading~0); 410055#L2566-18 assume !(0 == ~currentFloorID~0); 406596#L2566-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 405078#L2572-13 assume { :end_inline_continueInDirection } true; 405079#L2876-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 417699#L357-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 417698#L384-77 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 417692#L3231-11 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 417693#L951-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 417685#L951-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 417686#L2891-2 assume { :end_inline_timeShift } true; 417681#L1123 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret15#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 417682#L95-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 438724#L120-1 bobCall_#t~ret15#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret15#1;havoc bobCall_#t~ret15#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 438723#L628-1 assume 0 == initPersonOnFloor_~floor#1; 408530#L629-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 404269#L736-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 408138#L420-2 assume !(0 == callOnFloor_~floorID#1); 408139#L423-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 442982#L432-5 assume { :end_inline_callOnFloor } true; 442981#L772-1 assume { :end_inline_initPersonOnFloor } true; 442980#L1056 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret21#1, cleanup_#t~ret22#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 442979#L357-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 434892#L384-78 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 442978#L3231-12 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 442976#L2616-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 442975#L1947-12 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 442974#L2620-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 408781#L2633-3 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 409930#L2768-6 assume !(0 != timeShift_~tmp___9~2#1); 409630#L2859-9 assume !(1 == ~doorState~0); 409550#L2859-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 409551#L357-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 440112#L384-81 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 440113#L3231-13 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 405566#L2499-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 405567#L1947-13 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 443076#L2512-6 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 443074#L2867-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 443075#L2556-9 assume !(1 == ~currentHeading~0); 443652#L2566-27 assume !(0 == ~currentFloorID~0); 443651#L2566-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 407861#L2572-19 assume { :end_inline_continueInDirection } true; 407812#L2876-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 443844#L357-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 443845#L384-103 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 443835#L3231-15 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 443836#L951-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 407340#L951-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 407341#L2891-3 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 451988#L1139-2 [2021-12-21 22:24:11,749 INFO L793 eck$LassoCheckResult]: Loop: 451988#L1139-2 assume !false; 443554#L1140 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 442729#L1143 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 442727#L1818 cleanup_#t~ret21#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret21#1;havoc cleanup_#t~ret21#1; 442728#L1147 assume 1 != cleanup_~tmp___0~3#1; 405931#L1147-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret57#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 405932#L357-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 442697#L384-104 anyStopRequested_#t~ret52#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret52#1;havoc anyStopRequested_#t~ret52#1; 442698#L2055 assume !(0 != anyStopRequested_~tmp___3~0#1); 442622#L2059 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 442616#L2119 isIdle_#t~ret57#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret57#1;havoc isIdle_#t~ret57#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 442612#L2132 cleanup_#t~ret22#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 410284#L1159 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 410285#L357-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 431507#L384-109 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 431508#L3231-16 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 431499#L2616-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 431500#L1947-16 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 431230#L2620-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 410248#L2633-4 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 458137#L2768-8 assume !(0 != timeShift_~tmp___9~2#1); 458136#L2859-12 assume 1 == ~doorState~0;~doorState~0 := 0; 458135#L2859-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 410150#L357-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 410151#L384-112 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 410146#L3231-17 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 410147#L2499-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 458134#L1947-17 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 458127#L2512-8 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 458125#L2867-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 410286#L2556-12 assume !(1 == ~currentHeading~0); 407405#L2566-36 assume !(0 == ~currentFloorID~0); 407406#L2566-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 408313#L2572-25 assume { :end_inline_continueInDirection } true; 408403#L2876-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 444536#L357-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 410700#L384-134 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 444533#L3231-19 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 444524#L951-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 444394#L951-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 444395#L2891-4 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 451988#L1139-2 [2021-12-21 22:24:11,749 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:11,749 INFO L85 PathProgramCache]: Analyzing trace with hash -386602737, now seen corresponding path program 1 times [2021-12-21 22:24:11,750 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:11,750 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1038037972] [2021-12-21 22:24:11,750 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:11,750 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:11,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:11,783 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:11,783 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:24:11,784 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1038037972] [2021-12-21 22:24:11,784 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1038037972] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:24:11,784 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:24:11,784 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 22:24:11,784 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1517206790] [2021-12-21 22:24:11,784 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:24:11,785 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:24:11,785 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:11,785 INFO L85 PathProgramCache]: Analyzing trace with hash -1916667049, now seen corresponding path program 1 times [2021-12-21 22:24:11,785 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:11,785 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1728866691] [2021-12-21 22:24:11,786 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:11,786 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:11,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:11,817 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:11,817 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:24:11,818 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1728866691] [2021-12-21 22:24:11,818 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1728866691] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:24:11,818 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:24:11,818 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-21 22:24:11,818 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1914054367] [2021-12-21 22:24:11,819 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:24:11,819 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-21 22:24:11,819 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:24:11,820 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-21 22:24:11,820 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2021-12-21 22:24:11,820 INFO L87 Difference]: Start difference. First operand 57289 states and 106910 transitions. cyclomatic complexity: 49623 Second operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 8 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:22,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:22,220 INFO L93 Difference]: Finished difference Result 333251 states and 621440 transitions. [2021-12-21 22:24:22,221 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2021-12-21 22:24:22,221 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 333251 states and 621440 transitions. [2021-12-21 22:24:23,824 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 92194 [2021-12-21 22:24:24,990 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 333251 states to 333251 states and 621440 transitions. [2021-12-21 22:24:24,991 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 333251 [2021-12-21 22:24:25,507 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 333251 [2021-12-21 22:24:25,508 INFO L73 IsDeterministic]: Start isDeterministic. Operand 333251 states and 621440 transitions. [2021-12-21 22:24:25,675 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-21 22:24:25,676 INFO L681 BuchiCegarLoop]: Abstraction has 333251 states and 621440 transitions. [2021-12-21 22:24:25,855 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 333251 states and 621440 transitions. [2021-12-21 22:24:27,321 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 333251 to 56832. [2021-12-21 22:24:27,379 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56832 states, 56832 states have (on average 1.8656214808558558) internal successors, (106027), 56831 states have internal predecessors, (106027), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:27,486 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56832 states to 56832 states and 106027 transitions. [2021-12-21 22:24:27,486 INFO L704 BuchiCegarLoop]: Abstraction has 56832 states and 106027 transitions. [2021-12-21 22:24:27,487 INFO L587 BuchiCegarLoop]: Abstraction has 56832 states and 106027 transitions. [2021-12-21 22:24:27,487 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-12-21 22:24:27,487 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 56832 states and 106027 transitions. [2021-12-21 22:24:27,633 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 12866 [2021-12-21 22:24:27,633 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-21 22:24:27,633 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-21 22:24:27,635 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:27,635 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 22:24:27,636 INFO L791 eck$LassoCheckResult]: Stem: 799896#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 799897#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~7#1, main_~tmp~11#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 800678#L1735 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 800679#L1728 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 800732#L1743 main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret27#1;havoc main_#t~ret27#1; 800795#L1333 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 799939#L1307 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret20#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 799604#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 796626#L120 bigMacCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret20#1;havoc bigMacCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 799183#L628 assume 0 == initPersonOnFloor_~floor#1; 799687#L629 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 795344#L736-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 796839#L420 assume !(0 == callOnFloor_~floorID#1); 800439#L423 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 796062#L432-2 assume { :end_inline_callOnFloor } true; 796063#L772 assume { :end_inline_initPersonOnFloor } true; 799650#L1111 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 795779#L357 assume !(0 == isFloorCalling_~floorID#1); 795781#L361 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 800869#L384 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 800870#L3231 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 800865#L2616 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 800866#L1947 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 800855#L2620 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 798817#L2633 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 800210#L2768 assume !(0 != timeShift_~tmp___9~2#1); 800851#L2859 assume !(1 == ~doorState~0); 801727#L2859-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 801728#L357-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 801903#L384-3 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 801904#L3231-1 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 801867#L2499 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 801868#L1947-1 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 818373#L2512 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 818333#L2867 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 818334#L2556 assume !(1 == ~currentHeading~0); 823468#L2566 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 823464#L2566-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 818193#L2572-1 assume { :end_inline_continueInDirection } true; 817525#L2876-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 817524#L357-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 817523#L384-25 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 817522#L3231-3 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 817519#L951 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 817517#L951-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 817512#L2891 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 800326#L357-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 800327#L384-26 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 819364#L3231-4 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 819363#L2616-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__base } true;havoc stopRequestedAtCurrentFloor__wrappee__base_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret73#1, stopRequestedAtCurrentFloor__wrappee__base_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20#1, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 819361#L357-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 819356#L384-28 stopRequestedAtCurrentFloor__wrappee__base_#t~ret73#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret73#1;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret73#1; 819353#L2589-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res#1 := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24#1; 819352#L2601-3 stopRequestedAtCurrentFloor_#t~ret78#1 := stopRequestedAtCurrentFloor__wrappee__base_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__base } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret78#1;havoc stopRequestedAtCurrentFloor_#t~ret78#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 819351#L2633-1 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 819349#L2768-2 assume !(0 != timeShift_~tmp___9~2#1); 819348#L2859-3 assume !(1 == ~doorState~0); 819346#L2859-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 819345#L357-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 819343#L384-29 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 819342#L3231-5 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 819340#L2499-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 819338#L1947-5 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 819332#L2512-2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 819310#L2867-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 819309#L2556-3 assume !(1 == ~currentHeading~0); 819303#L2566-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 819302#L2566-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 815243#L2572-7 assume { :end_inline_continueInDirection } true; 814317#L2876-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 814315#L357-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 814313#L384-51 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 814311#L3231-7 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 814307#L951-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 814305#L951-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 814300#L2891-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 814298#L357-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 814297#L384-52 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 814296#L3231-8 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 814295#L2616-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__base } true;havoc stopRequestedAtCurrentFloor__wrappee__base_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret73#1, stopRequestedAtCurrentFloor__wrappee__base_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20#1, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 814294#L357-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 814288#L384-54 stopRequestedAtCurrentFloor__wrappee__base_#t~ret73#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret73#1;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret73#1; 814285#L2589-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res#1 := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24#1; 814284#L2601-5 stopRequestedAtCurrentFloor_#t~ret78#1 := stopRequestedAtCurrentFloor__wrappee__base_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__base } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret78#1;havoc stopRequestedAtCurrentFloor_#t~ret78#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 814283#L2633-2 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 814276#L2768-4 assume !(0 != timeShift_~tmp___9~2#1); 814277#L2859-6 assume !(1 == ~doorState~0); 815302#L2859-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 815301#L357-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 815298#L384-55 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 815297#L3231-9 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 815295#L2499-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 815293#L1947-9 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 815291#L2512-4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 815287#L2867-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 815262#L2556-6 assume !(1 == ~currentHeading~0); 815252#L2566-18 assume !(0 == ~currentFloorID~0); 813700#L2566-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 813696#L2572-13 assume { :end_inline_continueInDirection } true; 810523#L2876-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 810522#L357-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 802791#L384-77 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 810521#L3231-11 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 810516#L951-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 810514#L951-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 810513#L2891-2 assume { :end_inline_timeShift } true; 810512#L1123 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret15#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 810511#L95-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 810505#L120-1 bobCall_#t~ret15#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret15#1;havoc bobCall_#t~ret15#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 806458#L628-1 assume 0 == initPersonOnFloor_~floor#1; 806459#L629-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 806387#L736-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 806388#L420-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 810445#L432-5 assume { :end_inline_callOnFloor } true; 802856#L772-1 assume { :end_inline_initPersonOnFloor } true; 800936#L1056 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret21#1, cleanup_#t~ret22#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 800937#L357-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 800920#L384-78 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 800921#L3231-12 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 800905#L2616-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 800906#L1947-12 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 800897#L2620-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 799363#L2633-3 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 811319#L2768-6 assume !(0 != timeShift_~tmp___9~2#1); 811318#L2859-9 assume !(1 == ~doorState~0); 811317#L2859-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 811316#L357-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 811315#L384-81 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 811314#L3231-13 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 811312#L2499-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 811310#L1947-13 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 811296#L2512-6 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 810443#L2867-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 806346#L2556-9 assume !(1 == ~currentHeading~0); 806343#L2566-27 assume !(0 == ~currentFloorID~0); 806340#L2566-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 806339#L2572-19 assume { :end_inline_continueInDirection } true; 804148#L2876-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 804149#L357-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 804140#L384-103 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 804141#L3231-15 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 804136#L951-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 804137#L1947-15 __utac_acc__Specification14_spec__1_#t~ret11#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 804130#L3240-3 __utac_acc__Specification14_spec__1_#t~ret12#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1; 804131#L956-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 804124#L951-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 804125#L2891-3 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 839367#L1139-2 [2021-12-21 22:24:27,637 INFO L793 eck$LassoCheckResult]: Loop: 839367#L1139-2 assume !false; 804118#L1140 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 804119#L1143 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 804114#L1818 cleanup_#t~ret21#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret21#1;havoc cleanup_#t~ret21#1; 804115#L1147 assume 1 != cleanup_~tmp___0~3#1; 804110#L1147-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret57#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 804111#L357-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 804106#L384-104 anyStopRequested_#t~ret52#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret52#1;havoc anyStopRequested_#t~ret52#1; 804107#L2055 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 804102#L2119 isIdle_#t~ret57#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret57#1;havoc isIdle_#t~ret57#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 804103#L2132 cleanup_#t~ret22#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 804098#L1159 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 804099#L357-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 802847#L384-109 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 802848#L3231-16 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 802842#L2616-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 802843#L1947-16 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 804086#L2620-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 800689#L2633-4 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 831018#L2768-8 assume !(0 != timeShift_~tmp___9~2#1); 831019#L2859-12 assume 1 == ~doorState~0;~doorState~0 := 0; 847647#L2859-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 800618#L357-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 800619#L384-112 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 847714#L3231-17 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 847711#L2499-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 847712#L1947-17 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 848169#L2512-8 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 848162#L2867-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 848155#L2556-12 assume !(1 == ~currentHeading~0); 847389#L2566-36 assume !(0 == ~currentFloorID~0); 847236#L2566-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 847227#L2572-25 assume { :end_inline_continueInDirection } true; 839388#L2876-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 804164#L357-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 804163#L384-134 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 804162#L3231-19 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 804161#L951-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 804160#L1947-19 __utac_acc__Specification14_spec__1_#t~ret11#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 804158#L3240-4 __utac_acc__Specification14_spec__1_#t~ret12#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1; 804159#L956-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 804150#L951-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 804151#L2891-4 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 839367#L1139-2 [2021-12-21 22:24:27,637 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:27,637 INFO L85 PathProgramCache]: Analyzing trace with hash 155077849, now seen corresponding path program 1 times [2021-12-21 22:24:27,637 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:27,638 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1087238415] [2021-12-21 22:24:27,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:27,638 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:27,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:27,949 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:27,949 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 22:24:27,949 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1087238415] [2021-12-21 22:24:27,949 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1087238415] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 22:24:27,950 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 22:24:27,950 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 22:24:27,950 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [150010279] [2021-12-21 22:24:27,950 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 22:24:27,950 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-21 22:24:27,950 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:27,950 INFO L85 PathProgramCache]: Analyzing trace with hash 1684701755, now seen corresponding path program 1 times [2021-12-21 22:24:27,950 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 22:24:27,951 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1455891044] [2021-12-21 22:24:27,951 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 22:24:27,951 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 22:24:27,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:27,961 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-21 22:24:27,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-21 22:24:27,996 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-21 22:24:29,127 INFO L210 LassoAnalysis]: Preferences: [2021-12-21 22:24:29,128 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-21 22:24:29,128 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-21 22:24:29,128 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-21 22:24:29,128 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-12-21 22:24:29,128 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:24:29,128 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-21 22:24:29,128 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-21 22:24:29,128 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product03.cil.c_Iteration5_Loop [2021-12-21 22:24:29,128 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-21 22:24:29,128 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-21 22:24:29,145 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,152 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,154 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,155 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,159 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,160 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,161 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,162 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,164 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,165 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,166 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,169 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,171 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,172 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,173 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,174 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,184 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,186 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,187 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,189 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,193 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,197 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,198 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,199 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,201 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,202 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,211 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,214 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,216 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,217 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,218 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,219 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,221 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,222 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,223 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,227 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,228 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,230 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,231 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,232 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,234 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,235 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,236 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,238 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,241 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,243 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,244 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,245 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,249 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,260 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,264 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,268 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,270 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,272 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,280 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,282 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,283 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,285 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,286 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,288 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,290 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,295 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,297 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,299 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,300 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:29,720 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-21 22:24:29,720 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-12-21 22:24:29,722 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:24:29,722 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 22:24:29,723 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-21 22:24:29,724 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2021-12-21 22:24:29,729 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-21 22:24:29,730 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-21 22:24:29,764 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Ended with exit code 0 [2021-12-21 22:24:29,764 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:24:29,764 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 22:24:29,765 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-21 22:24:29,766 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2021-12-21 22:24:29,768 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-12-21 22:24:29,768 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-21 22:24:30,350 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-12-21 22:24:30,354 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Forceful destruction successful, exit code 0 [2021-12-21 22:24:30,354 INFO L210 LassoAnalysis]: Preferences: [2021-12-21 22:24:30,355 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-21 22:24:30,355 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-21 22:24:30,355 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-21 22:24:30,355 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-12-21 22:24:30,355 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:24:30,355 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-21 22:24:30,355 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-21 22:24:30,355 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product03.cil.c_Iteration5_Loop [2021-12-21 22:24:30,355 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-21 22:24:30,355 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-21 22:24:30,357 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,365 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,377 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,378 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,381 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,383 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,386 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,387 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,388 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,390 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,391 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,394 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,395 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,396 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,399 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,401 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,402 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,403 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,405 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,406 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,408 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,412 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,413 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,415 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,423 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,425 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,426 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,430 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,433 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,434 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,436 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,437 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,441 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,442 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,444 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,445 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,447 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,448 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,452 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,454 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,455 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,456 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,458 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,460 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,462 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,463 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,470 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,471 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,474 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,475 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,488 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,490 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,497 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,507 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,509 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,510 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,512 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,513 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,514 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,519 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,520 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,521 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,522 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,528 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,533 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-21 22:24:30,969 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-21 22:24:30,972 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-12-21 22:24:30,973 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:24:30,974 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 22:24:30,974 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-21 22:24:30,975 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2021-12-21 22:24:30,977 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-21 22:24:30,984 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-21 22:24:30,984 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-21 22:24:30,984 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-21 22:24:30,984 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-21 22:24:30,984 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-21 22:24:30,986 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-21 22:24:30,986 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-21 22:24:30,995 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-21 22:24:31,012 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2021-12-21 22:24:31,012 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:24:31,012 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 22:24:31,013 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-21 22:24:31,016 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2021-12-21 22:24:31,017 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-21 22:24:31,024 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-21 22:24:31,024 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-21 22:24:31,025 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-21 22:24:31,025 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-21 22:24:31,025 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-21 22:24:31,027 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-21 22:24:31,027 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-21 22:24:31,042 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-12-21 22:24:31,045 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2021-12-21 22:24:31,045 INFO L444 ModelExtractionUtils]: 2 out of 5 variables were initially zero. Simplification set additionally 0 variables to zero. [2021-12-21 22:24:31,046 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-21 22:24:31,046 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 22:24:31,048 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-21 22:24:31,070 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-12-21 22:24:31,070 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-12-21 22:24:31,070 INFO L513 LassoAnalysis]: Proved termination. [2021-12-21 22:24:31,071 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~2#1) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~2#1 Supporting invariants [] [2021-12-21 22:24:31,083 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2021-12-21 22:24:31,114 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2021-12-21 22:24:31,116 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-12-21 22:24:31,141 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 22:24:31,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:31,282 INFO L263 TraceCheckSpWp]: Trace formula consists of 992 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-21 22:24:31,286 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 22:24:31,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 22:24:31,555 INFO L263 TraceCheckSpWp]: Trace formula consists of 171 conjuncts, 5 conjunts are in the unsatisfiable core [2021-12-21 22:24:31,556 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 22:24:31,749 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 22:24:31,754 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2021-12-21 22:24:31,754 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 56832 states and 106027 transitions. cyclomatic complexity: 49201 Second operand has 5 states, 5 states have (on average 38.0) internal successors, (190), 5 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:32,125 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2021-12-21 22:24:32,455 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 56832 states and 106027 transitions. cyclomatic complexity: 49201. Second operand has 5 states, 5 states have (on average 38.0) internal successors, (190), 5 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 69722 states and 130001 transitions. Complement of second has 8 states. [2021-12-21 22:24:32,456 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2021-12-21 22:24:32,456 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 38.0) internal successors, (190), 5 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:32,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 10396 transitions. [2021-12-21 22:24:32,466 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10396 transitions. Stem has 147 letters. Loop has 43 letters. [2021-12-21 22:24:32,467 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-21 22:24:32,467 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10396 transitions. Stem has 190 letters. Loop has 43 letters. [2021-12-21 22:24:32,468 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-21 22:24:32,468 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10396 transitions. Stem has 147 letters. Loop has 86 letters. [2021-12-21 22:24:32,469 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2021-12-21 22:24:32,469 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 69722 states and 130001 transitions. [2021-12-21 22:24:32,742 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2021-12-21 22:24:32,742 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 69722 states to 0 states and 0 transitions. [2021-12-21 22:24:32,742 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2021-12-21 22:24:32,742 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2021-12-21 22:24:32,742 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2021-12-21 22:24:32,742 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-21 22:24:32,742 INFO L681 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 22:24:32,742 INFO L704 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 22:24:32,743 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 22:24:32,743 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 22:24:32,743 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 22:24:32,743 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand has 3 states, 3 states have (on average 49.0) internal successors, (147), 3 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 22:24:32,743 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 22:24:32,743 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2021-12-21 22:24:32,744 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-21 22:24:32,744 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2021-12-21 22:24:32,744 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2021-12-21 22:24:32,744 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2021-12-21 22:24:32,744 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2021-12-21 22:24:32,744 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2021-12-21 22:24:32,744 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2021-12-21 22:24:32,745 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-21 22:24:32,745 INFO L681 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 22:24:32,745 INFO L704 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 22:24:32,745 INFO L587 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 22:24:32,745 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-12-21 22:24:32,745 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2021-12-21 22:24:32,745 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2021-12-21 22:24:32,745 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2021-12-21 22:24:32,750 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 21.12 10:24:32 BoogieIcfgContainer [2021-12-21 22:24:32,750 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2021-12-21 22:24:32,750 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-21 22:24:32,750 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-21 22:24:32,751 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-21 22:24:32,751 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 10:23:49" (3/4) ... [2021-12-21 22:24:32,753 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-21 22:24:32,753 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-21 22:24:32,754 INFO L158 Benchmark]: Toolchain (without parser) took 49935.39ms. Allocated memory was 104.9MB in the beginning and 9.2GB in the end (delta: 9.1GB). Free memory was 62.1MB in the beginning and 6.2GB in the end (delta: -6.1GB). Peak memory consumption was 3.0GB. Max. memory is 16.1GB. [2021-12-21 22:24:32,754 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 104.9MB. Free memory is still 81.7MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 22:24:32,755 INFO L158 Benchmark]: CACSL2BoogieTranslator took 597.96ms. Allocated memory is still 104.9MB. Free memory was 61.9MB in the beginning and 53.1MB in the end (delta: 8.8MB). Peak memory consumption was 6.9MB. Max. memory is 16.1GB. [2021-12-21 22:24:32,755 INFO L158 Benchmark]: Boogie Procedure Inliner took 245.78ms. Allocated memory was 104.9MB in the beginning and 125.8MB in the end (delta: 21.0MB). Free memory was 53.1MB in the beginning and 62.6MB in the end (delta: -9.5MB). Peak memory consumption was 26.4MB. Max. memory is 16.1GB. [2021-12-21 22:24:32,755 INFO L158 Benchmark]: Boogie Preprocessor took 348.71ms. Allocated memory is still 125.8MB. Free memory was 62.6MB in the beginning and 50.3MB in the end (delta: 12.3MB). Peak memory consumption was 47.3MB. Max. memory is 16.1GB. [2021-12-21 22:24:32,756 INFO L158 Benchmark]: RCFGBuilder took 5346.52ms. Allocated memory was 125.8MB in the beginning and 503.3MB in the end (delta: 377.5MB). Free memory was 50.3MB in the beginning and 280.4MB in the end (delta: -230.1MB). Peak memory consumption was 307.7MB. Max. memory is 16.1GB. [2021-12-21 22:24:32,756 INFO L158 Benchmark]: BuchiAutomizer took 43388.45ms. Allocated memory was 503.3MB in the beginning and 9.2GB in the end (delta: 8.7GB). Free memory was 280.4MB in the beginning and 6.2GB in the end (delta: -5.9GB). Peak memory consumption was 2.8GB. Max. memory is 16.1GB. [2021-12-21 22:24:32,756 INFO L158 Benchmark]: Witness Printer took 2.96ms. Allocated memory is still 9.2GB. Free memory is still 6.2GB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 22:24:32,758 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 104.9MB. Free memory is still 81.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 597.96ms. Allocated memory is still 104.9MB. Free memory was 61.9MB in the beginning and 53.1MB in the end (delta: 8.8MB). Peak memory consumption was 6.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 245.78ms. Allocated memory was 104.9MB in the beginning and 125.8MB in the end (delta: 21.0MB). Free memory was 53.1MB in the beginning and 62.6MB in the end (delta: -9.5MB). Peak memory consumption was 26.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 348.71ms. Allocated memory is still 125.8MB. Free memory was 62.6MB in the beginning and 50.3MB in the end (delta: 12.3MB). Peak memory consumption was 47.3MB. Max. memory is 16.1GB. * RCFGBuilder took 5346.52ms. Allocated memory was 125.8MB in the beginning and 503.3MB in the end (delta: 377.5MB). Free memory was 50.3MB in the beginning and 280.4MB in the end (delta: -230.1MB). Peak memory consumption was 307.7MB. Max. memory is 16.1GB. * BuchiAutomizer took 43388.45ms. Allocated memory was 503.3MB in the beginning and 9.2GB in the end (delta: 8.7GB). Free memory was 280.4MB in the beginning and 6.2GB in the end (delta: -5.9GB). Peak memory consumption was 2.8GB. Max. memory is 16.1GB. * Witness Printer took 2.96ms. Allocated memory is still 9.2GB. Free memory is still 6.2GB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 6 terminating modules (5 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 5 modules have a trivial ranking function, the largest among these consists of 8 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 43.3s and 6 iterations. TraceHistogramMax:1. Analysis of lassos took 4.0s. Construction of modules took 11.9s. Büchi inclusion checks took 13.7s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 0. Automata minimization 4.7s AutomataMinimizationTime, 4 MinimizatonAttempts, 527964 StatesRemovedByMinimization, 4 NontrivialMinimizations. Non-live state removal took 6.3s Buchi closure took 1.0s. Biggest automaton had 57289 states and ocurred in iteration 3. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 487530 SdHoareTripleChecker+Valid, 14.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 487529 mSDsluCounter, 606267 SdHoareTripleChecker+Invalid, 11.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 522164 mSDsCounter, 3952 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 26143 IncrementalHoareTripleChecker+Invalid, 30095 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3952 mSolverCounterUnsat, 84103 mSDtfsCounter, 26143 mSolverCounterSat, 0.6s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI4 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital178 mio100 ax100 hnf100 lsp19 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq223 hnf86 smp100 dnf163 smp100 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 22ms VariablesStem: 0 VariablesLoop: 0 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 0 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 0.6s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! [2021-12-21 22:24:32,821 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE