./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec14_product03.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec14_product03.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 8ed4163e8f042a84d9cdccd4fee3ee0ba89fdce83cd991779acec4a51d9a650c --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-02 20:48:22,164 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-02 20:48:22,166 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-02 20:48:22,210 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-02 20:48:22,217 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-02 20:48:22,218 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-02 20:48:22,222 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-02 20:48:22,226 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-02 20:48:22,230 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-02 20:48:22,232 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-02 20:48:22,233 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-02 20:48:22,235 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-02 20:48:22,237 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-02 20:48:22,241 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-02 20:48:22,242 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-02 20:48:22,244 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-02 20:48:22,247 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-02 20:48:22,253 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-02 20:48:22,255 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-02 20:48:22,257 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-02 20:48:22,263 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-02 20:48:22,265 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-02 20:48:22,266 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-02 20:48:22,268 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-02 20:48:22,273 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-02 20:48:22,280 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-02 20:48:22,280 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-02 20:48:22,282 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-02 20:48:22,283 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-02 20:48:22,284 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-02 20:48:22,285 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-02 20:48:22,287 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-02 20:48:22,288 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-02 20:48:22,290 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-02 20:48:22,291 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-02 20:48:22,293 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-02 20:48:22,294 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-02 20:48:22,294 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-02 20:48:22,295 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-02 20:48:22,296 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-02 20:48:22,298 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-02 20:48:22,299 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-11-02 20:48:22,325 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-02 20:48:22,325 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-02 20:48:22,326 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-02 20:48:22,326 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-02 20:48:22,327 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-02 20:48:22,327 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-02 20:48:22,328 INFO L138 SettingsManager]: * Use SBE=true [2022-11-02 20:48:22,328 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-11-02 20:48:22,328 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-11-02 20:48:22,328 INFO L138 SettingsManager]: * Use old map elimination=false [2022-11-02 20:48:22,328 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-11-02 20:48:22,328 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-11-02 20:48:22,329 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-11-02 20:48:22,329 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-02 20:48:22,329 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-02 20:48:22,329 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-02 20:48:22,330 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-02 20:48:22,330 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-02 20:48:22,330 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-02 20:48:22,330 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-11-02 20:48:22,330 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-11-02 20:48:22,330 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-11-02 20:48:22,331 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-02 20:48:22,331 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-02 20:48:22,331 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-11-02 20:48:22,331 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-02 20:48:22,331 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-11-02 20:48:22,332 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-02 20:48:22,332 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-02 20:48:22,332 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-02 20:48:22,332 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-02 20:48:22,333 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-11-02 20:48:22,334 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8ed4163e8f042a84d9cdccd4fee3ee0ba89fdce83cd991779acec4a51d9a650c [2022-11-02 20:48:22,676 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-02 20:48:22,718 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-02 20:48:22,722 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-02 20:48:22,723 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-02 20:48:22,724 INFO L275 PluginConnector]: CDTParser initialized [2022-11-02 20:48:22,726 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/../../sv-benchmarks/c/product-lines/elevator_spec14_product03.cil.c [2022-11-02 20:48:22,797 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/data/6f0f1dbf2/d25b8187bc6f42b69d309ce036b009df/FLAGe54d7cabf [2022-11-02 20:48:23,516 INFO L306 CDTParser]: Found 1 translation units. [2022-11-02 20:48:23,516 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/sv-benchmarks/c/product-lines/elevator_spec14_product03.cil.c [2022-11-02 20:48:23,539 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/data/6f0f1dbf2/d25b8187bc6f42b69d309ce036b009df/FLAGe54d7cabf [2022-11-02 20:48:23,722 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/data/6f0f1dbf2/d25b8187bc6f42b69d309ce036b009df [2022-11-02 20:48:23,725 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-02 20:48:23,729 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-02 20:48:23,732 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-02 20:48:23,732 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-02 20:48:23,735 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-02 20:48:23,736 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:48:23" (1/1) ... [2022-11-02 20:48:23,737 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@730bc846 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:48:23, skipping insertion in model container [2022-11-02 20:48:23,737 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:48:23" (1/1) ... [2022-11-02 20:48:23,747 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-02 20:48:23,810 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-02 20:48:24,345 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/sv-benchmarks/c/product-lines/elevator_spec14_product03.cil.c[68958,68971] [2022-11-02 20:48:24,346 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:48:24,358 INFO L203 MainTranslator]: Completed pre-run [2022-11-02 20:48:24,483 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/sv-benchmarks/c/product-lines/elevator_spec14_product03.cil.c[68958,68971] [2022-11-02 20:48:24,483 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:48:24,520 INFO L208 MainTranslator]: Completed translation [2022-11-02 20:48:24,521 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:48:24 WrapperNode [2022-11-02 20:48:24,522 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-02 20:48:24,525 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-02 20:48:24,525 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-02 20:48:24,525 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-02 20:48:24,534 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:48:24" (1/1) ... [2022-11-02 20:48:24,558 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:48:24" (1/1) ... [2022-11-02 20:48:24,912 INFO L138 Inliner]: procedures = 89, calls = 329, calls flagged for inlining = 182, calls inlined = 571, statements flattened = 18930 [2022-11-02 20:48:24,913 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-02 20:48:24,913 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-02 20:48:24,914 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-02 20:48:24,914 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-02 20:48:24,925 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:48:24" (1/1) ... [2022-11-02 20:48:24,926 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:48:24" (1/1) ... [2022-11-02 20:48:24,975 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:48:24" (1/1) ... [2022-11-02 20:48:24,975 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:48:24" (1/1) ... [2022-11-02 20:48:25,113 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:48:24" (1/1) ... [2022-11-02 20:48:25,243 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:48:24" (1/1) ... [2022-11-02 20:48:25,267 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:48:24" (1/1) ... [2022-11-02 20:48:25,290 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:48:24" (1/1) ... [2022-11-02 20:48:25,342 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-02 20:48:25,343 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-02 20:48:25,344 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-02 20:48:25,344 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-02 20:48:25,345 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:48:24" (1/1) ... [2022-11-02 20:48:25,353 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:48:25,365 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:48:25,378 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:48:25,402 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-11-02 20:48:25,443 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-02 20:48:25,444 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-02 20:48:25,444 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-02 20:48:25,444 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-02 20:48:25,686 INFO L235 CfgBuilder]: Building ICFG [2022-11-02 20:48:25,688 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-02 20:48:34,827 INFO L276 CfgBuilder]: Performing block encoding [2022-11-02 20:48:34,882 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-02 20:48:34,882 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-02 20:48:34,889 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:48:34 BoogieIcfgContainer [2022-11-02 20:48:34,890 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-02 20:48:34,891 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-11-02 20:48:34,891 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-11-02 20:48:34,895 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-11-02 20:48:34,896 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-02 20:48:34,897 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 02.11 08:48:23" (1/3) ... [2022-11-02 20:48:34,898 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@7e3b9cd6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 02.11 08:48:34, skipping insertion in model container [2022-11-02 20:48:34,898 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-02 20:48:34,898 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:48:24" (2/3) ... [2022-11-02 20:48:34,898 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@7e3b9cd6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 02.11 08:48:34, skipping insertion in model container [2022-11-02 20:48:34,899 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-02 20:48:34,899 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:48:34" (3/3) ... [2022-11-02 20:48:34,900 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec14_product03.cil.c [2022-11-02 20:48:35,017 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2022-11-02 20:48:35,017 INFO L304 stractBuchiCegarLoop]: Hoare is false [2022-11-02 20:48:35,017 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-11-02 20:48:35,018 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-11-02 20:48:35,018 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-11-02 20:48:35,018 INFO L308 stractBuchiCegarLoop]: Difference is false [2022-11-02 20:48:35,018 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-11-02 20:48:35,018 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-11-02 20:48:35,041 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5556 states, 5555 states have (on average 1.8763276327632763) internal successors, (10423), 5555 states have internal predecessors, (10423), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:48:35,179 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1127 [2022-11-02 20:48:35,179 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:48:35,179 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:48:35,199 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:48:35,199 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:48:35,200 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-11-02 20:48:35,214 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5556 states, 5555 states have (on average 1.8763276327632763) internal successors, (10423), 5555 states have internal predecessors, (10423), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:48:35,291 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1127 [2022-11-02 20:48:35,291 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:48:35,291 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:48:35,298 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:48:35,298 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:48:35,308 INFO L748 eck$LassoCheckResult]: Stem: 3496#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 5432#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~7#1, main_~tmp~11#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 4928#L1735true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5109#L1728true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 5311#L1743true main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret27#1;havoc main_#t~ret27#1; 5350#L1333true assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 3543#L1307true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret20#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 3099#L95true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 2667#L120true bigMacCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret20#1;havoc bigMacCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5447#L628true assume 0 == initPersonOnFloor_~floor#1; 3208#L629true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 985#L736-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 4367#L420true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 573#L432-2true assume { :end_inline_callOnFloor } true; 3159#L772true assume { :end_inline_initPersonOnFloor } true; 4069#L1111true assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 435#L357true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3332#L384true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 4057#L3231true stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 3039#L2616true assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3884#L1947true stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1148#L2620true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 3952#L2633true timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 5550#L2768true assume !(0 != timeShift_~tmp___9~2#1); 122#L2859true assume !(1 == ~doorState~0); 4790#L2859-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5150#L357-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1496#L384-3true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1141#L3231-1true stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 1409#L2499true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 349#L1947-1true stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 2429#L2512true timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 4859#L2867true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 210#L2556true assume !(1 == ~currentHeading~0); 1350#L2566true assume !(0 == ~currentFloorID~0); 1108#L2566-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2189#L2572-1true assume { :end_inline_continueInDirection } true; 3261#L2876-2true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2608#L357-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1823#L384-25true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 682#L3231-3true __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 2321#L951true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 5240#L951-1true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 847#L2891true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 4151#L357-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3592#L384-26true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1875#L3231-4true stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 2355#L2616-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 4055#L1947-4true stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 2750#L2620-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 4303#L2633-1true timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 866#L2768-2true assume !(0 != timeShift_~tmp___9~2#1); 945#L2859-3true assume !(1 == ~doorState~0); 4282#L2859-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2638#L357-29true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 4926#L384-29true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 241#L3231-5true stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 1192#L2499-2true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1752#L1947-5true stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 4673#L2512-2true timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 2073#L2867-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 3694#L2556-3true assume !(1 == ~currentHeading~0); 3768#L2566-9true assume !(0 == ~currentFloorID~0); 5530#L2566-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1760#L2572-7true assume { :end_inline_continueInDirection } true; 5262#L2876-5true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2618#L357-51true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2311#L384-51true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 4839#L3231-7true __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 2936#L951-2true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 3086#L951-3true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 252#L2891-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 648#L357-52true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3769#L384-52true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1140#L3231-8true stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 120#L2616-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 39#L1947-8true stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 5210#L2620-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 2405#L2633-2true timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 1913#L2768-4true assume !(0 != timeShift_~tmp___9~2#1); 326#L2859-6true assume !(1 == ~doorState~0); 755#L2859-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5386#L357-55true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1719#L384-55true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2249#L3231-9true stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 3426#L2499-4true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3023#L1947-9true stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 3817#L2512-4true timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 3888#L2867-4true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 2919#L2556-6true assume !(1 == ~currentHeading~0); 4550#L2566-18true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1372#L2566-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 403#L2572-13true assume { :end_inline_continueInDirection } true; 3462#L2876-8true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 462#L357-77true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 229#L384-77true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 3944#L3231-11true __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 1292#L951-4true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 2734#L951-5true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 905#L2891-2true assume { :end_inline_timeShift } true; 1257#L1123true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret15#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 113#L95-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1117#L120-1true bobCall_#t~ret15#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret15#1;havoc bobCall_#t~ret15#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2732#L628-1true assume 0 == initPersonOnFloor_~floor#1; 2623#L629-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1235#L736-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2290#L420-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 479#L432-5true assume { :end_inline_callOnFloor } true; 4023#L772-1true assume { :end_inline_initPersonOnFloor } true; 4403#L1056true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret21#1, cleanup_#t~ret22#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 3835#L357-78true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1927#L384-78true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1904#L3231-12true stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 2270#L2616-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2392#L1947-12true stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 2856#L2620-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 4342#L2633-3true timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 4477#L2768-6true assume !(0 != timeShift_~tmp___9~2#1); 3854#L2859-9true assume !(1 == ~doorState~0); 3720#L2859-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2185#L357-81true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 796#L384-81true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1153#L3231-13true stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 645#L2499-6true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2320#L1947-13true stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 4750#L2512-6true timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1013#L2867-6true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 2391#L2556-9true assume !(1 == ~currentHeading~0); 2773#L2566-27true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1962#L2566-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2079#L2572-19true assume { :end_inline_continueInDirection } true; 2049#L2876-11true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1796#L357-103true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 4718#L384-103true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 61#L3231-15true __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 2202#L951-6true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1709#L951-7true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1264#L2891-3true assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 3603#L1139-2true [2022-11-02 20:48:35,310 INFO L750 eck$LassoCheckResult]: Loop: 3603#L1139-2true assume !false; 4405#L1140true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2212#L1143true assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 5082#L1818true cleanup_#t~ret21#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret21#1;havoc cleanup_#t~ret21#1; 5228#L1147true assume 1 != cleanup_~tmp___0~3#1; 826#L1147-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret57#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5217#L357-104true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 812#L384-104true anyStopRequested_#t~ret52#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret52#1;havoc anyStopRequested_#t~ret52#1; 1897#L2055true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 555#L2119true isIdle_#t~ret57#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret57#1;havoc isIdle_#t~ret57#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 4743#L2132true cleanup_#t~ret22#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 5047#L1159true assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1324#L357-109true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1630#L384-109true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2182#L3231-16true stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 5484#L2616-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2145#L1947-16true stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 4960#L2620-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 2118#L2633-4true timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 4853#L2768-8true assume !(0 != timeShift_~tmp___9~2#1); 2253#L2859-12true assume 1 == ~doorState~0;~doorState~0 := 0; 641#L2859-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 4744#L357-112true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 4475#L384-112true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 4737#L3231-17true stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 5334#L2499-8true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1205#L1947-17true stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 4224#L2512-8true timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 3545#L2867-8true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 5051#L2556-12true assume !(1 == ~currentHeading~0); 1747#L2566-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2434#L2566-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2516#L2572-25true assume { :end_inline_continueInDirection } true; 3132#L2876-14true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 4527#L357-134true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 960#L384-134true isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 5090#L3231-19true __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 4533#L951-8true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 2535#L951-9true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1656#L2891-4true assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 3603#L1139-2true [2022-11-02 20:48:35,317 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:48:35,317 INFO L85 PathProgramCache]: Analyzing trace with hash -811112520, now seen corresponding path program 1 times [2022-11-02 20:48:35,329 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:48:35,329 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1951132516] [2022-11-02 20:48:35,330 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:48:35,330 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:48:35,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:48:36,046 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:48:36,047 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:48:36,047 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1951132516] [2022-11-02 20:48:36,048 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1951132516] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:48:36,048 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:48:36,049 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:48:36,050 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1211783527] [2022-11-02 20:48:36,052 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:48:36,057 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:48:36,058 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:48:36,058 INFO L85 PathProgramCache]: Analyzing trace with hash 98413491, now seen corresponding path program 1 times [2022-11-02 20:48:36,058 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:48:36,059 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1723803095] [2022-11-02 20:48:36,059 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:48:36,059 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:48:36,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:48:36,211 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:48:36,211 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:48:36,211 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1723803095] [2022-11-02 20:48:36,212 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1723803095] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:48:36,212 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:48:36,212 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-02 20:48:36,212 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [855565322] [2022-11-02 20:48:36,212 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:48:36,213 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:48:36,214 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:48:36,246 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 20:48:36,247 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-02 20:48:36,260 INFO L87 Difference]: Start difference. First operand has 5556 states, 5555 states have (on average 1.8763276327632763) internal successors, (10423), 5555 states have internal predecessors, (10423), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 7 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:48:47,614 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:48:47,614 INFO L93 Difference]: Finished difference Result 47197 states and 88169 transitions. [2022-11-02 20:48:47,616 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 47197 states and 88169 transitions. [2022-11-02 20:48:48,064 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 10279 [2022-11-02 20:48:48,363 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 47197 states to 47089 states and 88049 transitions. [2022-11-02 20:48:48,365 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 47089 [2022-11-02 20:48:48,425 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 47089 [2022-11-02 20:48:48,426 INFO L73 IsDeterministic]: Start isDeterministic. Operand 47089 states and 88049 transitions. [2022-11-02 20:48:48,508 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-02 20:48:48,508 INFO L218 hiAutomatonCegarLoop]: Abstraction has 47089 states and 88049 transitions. [2022-11-02 20:48:48,574 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47089 states and 88049 transitions. [2022-11-02 20:48:49,336 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47089 to 16016. [2022-11-02 20:48:49,372 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16016 states, 16016 states have (on average 1.8679445554445555) internal successors, (29917), 16015 states have internal predecessors, (29917), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:48:49,574 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16016 states to 16016 states and 29917 transitions. [2022-11-02 20:48:49,576 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16016 states and 29917 transitions. [2022-11-02 20:48:49,577 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-02 20:48:49,586 INFO L428 stractBuchiCegarLoop]: Abstraction has 16016 states and 29917 transitions. [2022-11-02 20:48:49,587 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-11-02 20:48:49,587 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16016 states and 29917 transitions. [2022-11-02 20:48:49,666 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3276 [2022-11-02 20:48:49,666 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:48:49,667 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:48:49,678 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:48:49,678 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:48:49,681 INFO L748 eck$LassoCheckResult]: Stem: 57813#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 57814#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~7#1, main_~tmp~11#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 58501#L1735 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 58502#L1728 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 58545#L1743 main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret27#1;havoc main_#t~ret27#1; 58588#L1333 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 57854#L1307 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret20#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 57528#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 54649#L120 bigMacCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret20#1;havoc bigMacCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 57127#L628 assume 0 == initPersonOnFloor_~floor#1; 57610#L629 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 53379#L736-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 54864#L420 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 54094#L432-2 assume { :end_inline_callOnFloor } true; 54095#L772 assume { :end_inline_initPersonOnFloor } true; 57575#L1111 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 53817#L357 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 53818#L384 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 58686#L3231 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 58674#L2616 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 58663#L1947 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 58646#L2620 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 58647#L2633 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 63480#L2768 assume !(0 != timeShift_~tmp___9~2#1); 63481#L2859 assume !(1 == ~doorState~0); 68350#L2859-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 68349#L357-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 68348#L384-3 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 68347#L3231-1 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 68345#L2499 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 68346#L1947-1 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 68354#L2512 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 68352#L2867 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 68351#L2556 assume !(1 == ~currentHeading~0); 55442#L2566 assume !(0 == ~currentFloorID~0); 52963#L2566-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 55062#L2572-1 assume { :end_inline_continueInDirection } true; 55516#L2876-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 57060#L357-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 56123#L384-25 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 56124#L3231-3 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 62892#L951 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 62884#L951-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 60685#L2891 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 59059#L357-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 58882#L384-26 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 58995#L3231-4 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 58901#L2616-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 58900#L1947-4 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 58899#L2620-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 57202#L2633-1 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 64233#L2768-2 assume !(0 != timeShift_~tmp___9~2#1); 64234#L2859-3 assume !(1 == ~doorState~0); 68691#L2859-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 68690#L357-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 68689#L384-29 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 68688#L3231-5 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 68686#L2499-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 56024#L1947-5 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 56025#L2512-2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 56430#L2867-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 56431#L2556-3 assume !(1 == ~currentHeading~0); 57965#L2566-9 assume !(0 == ~currentFloorID~0); 58001#L2566-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 56038#L2572-7 assume { :end_inline_continueInDirection } true; 53470#L2876-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 57071#L357-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 56728#L384-51 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 56729#L3231-7 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 62888#L951-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 62883#L951-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 58970#L2891-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 58967#L357-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 58874#L384-52 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 58947#L3231-8 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 58908#L2616-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 58907#L1947-8 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 58906#L2620-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 58571#L2633-2 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 65411#L2768-4 assume !(0 != timeShift_~tmp___9~2#1); 65412#L2859-6 assume !(1 == ~doorState~0); 68586#L2859-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 68585#L357-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 68584#L384-55 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 68583#L3231-9 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 68581#L2499-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 57461#L1947-9 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 55314#L2512-4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 58024#L2867-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 57354#L2556-6 assume !(1 == ~currentHeading~0); 57356#L2566-18 assume !(0 == ~currentFloorID~0); 55234#L2566-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53754#L2572-13 assume { :end_inline_continueInDirection } true; 53755#L2876-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 53874#L357-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 53368#L384-77 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 53369#L3231-11 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 55352#L951-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 55353#L951-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 54722#L2891-2 assume { :end_inline_timeShift } true; 54723#L1123 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret15#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 53091#L95-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 53092#L120-1 bobCall_#t~ret15#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret15#1;havoc bobCall_#t~ret15#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 55079#L628-1 assume 0 == initPersonOnFloor_~floor#1; 57076#L629-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 52947#L736-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 55263#L420-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 53907#L432-5 assume { :end_inline_callOnFloor } true; 53908#L772-1 assume { :end_inline_initPersonOnFloor } true; 58128#L1056 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret21#1, cleanup_#t~ret22#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 58032#L357-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 56260#L384-78 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 56261#L3231-12 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 58806#L2616-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 58800#L1947-12 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 58798#L2620-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 57301#L2633-3 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 67834#L2768-6 assume !(0 != timeShift_~tmp___9~2#1); 67835#L2859-9 assume !(1 == ~doorState~0); 68399#L2859-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 68398#L357-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 68397#L384-81 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 68396#L3231-13 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 68394#L2499-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 56740#L1947-13 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 56741#L2512-6 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 54904#L2867-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 54906#L2556-9 assume !(1 == ~currentHeading~0); 56823#L2566-27 assume !(0 == ~currentFloorID~0); 55950#L2566-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 56306#L2572-19 assume { :end_inline_continueInDirection } true; 56395#L2876-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 56087#L357-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 56088#L384-103 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 52953#L3231-15 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 52954#L951-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 54603#L951-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 55309#L2891-3 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 55310#L1139-2 [2022-11-02 20:48:49,683 INFO L750 eck$LassoCheckResult]: Loop: 55310#L1139-2 assume !false; 57896#L1140 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 56605#L1143 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 56606#L1818 cleanup_#t~ret21#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret21#1;havoc cleanup_#t~ret21#1; 58541#L1147 assume 1 != cleanup_~tmp___0~3#1; 54588#L1147-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret57#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 54589#L357-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 54563#L384-104 anyStopRequested_#t~ret52#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret52#1;havoc anyStopRequested_#t~ret52#1; 54564#L2055 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 54053#L2119 isIdle_#t~ret57#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret57#1;havoc isIdle_#t~ret57#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 54054#L2132 cleanup_#t~ret22#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 58445#L1159 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 55403#L357-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 55404#L384-109 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 55835#L3231-16 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 56570#L2616-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 58624#L1947-16 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 58869#L2620-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 58508#L2633-4 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 67096#L2768-8 assume !(0 != timeShift_~tmp___9~2#1); 67097#L2859-12 assume 1 == ~doorState~0;~doorState~0 := 0; 68604#L2859-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 68603#L357-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 68602#L384-112 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 68601#L3231-17 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 68599#L2499-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 55212#L1947-17 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 55213#L2512-8 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 57855#L2867-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 57856#L2556-12 assume !(1 == ~currentHeading~0); 56013#L2566-36 assume !(0 == ~currentFloorID~0); 56014#L2566-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 56868#L2572-25 assume { :end_inline_continueInDirection } true; 56956#L2876-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 57551#L357-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 54818#L384-134 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 54819#L3231-19 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 58368#L951-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 55191#L951-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 55876#L2891-4 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 55310#L1139-2 [2022-11-02 20:48:49,684 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:48:49,684 INFO L85 PathProgramCache]: Analyzing trace with hash 735022516, now seen corresponding path program 1 times [2022-11-02 20:48:49,685 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:48:49,686 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [572241118] [2022-11-02 20:48:49,686 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:48:49,687 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:48:49,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:48:49,958 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:48:49,959 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:48:49,959 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [572241118] [2022-11-02 20:48:49,959 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [572241118] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:48:49,959 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:48:49,960 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:48:49,960 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [525023850] [2022-11-02 20:48:49,960 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:48:49,960 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:48:49,961 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:48:49,961 INFO L85 PathProgramCache]: Analyzing trace with hash -294613519, now seen corresponding path program 1 times [2022-11-02 20:48:49,961 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:48:49,961 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [153886836] [2022-11-02 20:48:49,962 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:48:49,962 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:48:49,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:48:50,027 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:48:50,028 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:48:50,028 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [153886836] [2022-11-02 20:48:50,029 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [153886836] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:48:50,029 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:48:50,029 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:48:50,029 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [223939357] [2022-11-02 20:48:50,030 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:48:50,030 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:48:50,030 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:48:50,031 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:48:50,031 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:48:50,032 INFO L87 Difference]: Start difference. First operand 16016 states and 29917 transitions. cyclomatic complexity: 13903 Second operand has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 3 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:48:50,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:48:50,679 INFO L93 Difference]: Finished difference Result 28766 states and 53684 transitions. [2022-11-02 20:48:50,680 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28766 states and 53684 transitions. [2022-11-02 20:48:50,919 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6524 [2022-11-02 20:48:51,208 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28766 states to 28766 states and 53684 transitions. [2022-11-02 20:48:51,208 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28766 [2022-11-02 20:48:51,241 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28766 [2022-11-02 20:48:51,243 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28766 states and 53684 transitions. [2022-11-02 20:48:51,281 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-02 20:48:51,281 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28766 states and 53684 transitions. [2022-11-02 20:48:51,303 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28766 states and 53684 transitions. [2022-11-02 20:48:51,787 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28766 to 28734. [2022-11-02 20:48:51,861 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28734 states, 28734 states have (on average 1.8666388250852648) internal successors, (53636), 28733 states have internal predecessors, (53636), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:48:51,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28734 states to 28734 states and 53636 transitions. [2022-11-02 20:48:51,954 INFO L240 hiAutomatonCegarLoop]: Abstraction has 28734 states and 53636 transitions. [2022-11-02 20:48:51,955 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 20:48:51,956 INFO L428 stractBuchiCegarLoop]: Abstraction has 28734 states and 53636 transitions. [2022-11-02 20:48:51,956 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-11-02 20:48:51,956 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28734 states and 53636 transitions. [2022-11-02 20:48:52,062 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6516 [2022-11-02 20:48:52,063 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:48:52,063 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:48:52,074 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:48:52,074 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:48:52,077 INFO L748 eck$LassoCheckResult]: Stem: 102678#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 102679#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~7#1, main_~tmp~11#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 103448#L1735 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 103449#L1728 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 103502#L1743 main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret27#1;havoc main_#t~ret27#1; 103550#L1333 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 102723#L1307 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret20#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 102381#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 99452#L120 bigMacCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret20#1;havoc bigMacCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 101964#L628 assume 0 == initPersonOnFloor_~floor#1; 102466#L629 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 98168#L736-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 99662#L420 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 98889#L432-2 assume { :end_inline_callOnFloor } true; 98890#L772 assume { :end_inline_initPersonOnFloor } true; 102428#L1111 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 98608#L357 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 98609#L384 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 103611#L3231 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 103609#L2616 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 103606#L1947 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 103604#L2620 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 102985#L2633 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 102986#L2768 assume !(0 != timeShift_~tmp___9~2#1); 97901#L2859 assume !(1 == ~doorState~0); 97902#L2859-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 103394#L357-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 100479#L384-3 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 99918#L3231-1 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 99919#L2499 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 98427#L1947-1 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 98428#L2512 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 101690#L2867 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 98108#L2556 assume !(1 == ~currentHeading~0); 98110#L2566 assume !(0 == ~currentFloorID~0); 97752#L2566-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 108020#L2572-1 assume { :end_inline_continueInDirection } true; 111183#L2876-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 101897#L357-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 100940#L384-25 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 99108#L3231-3 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 99109#L951 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 98550#L951-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 99425#L2891 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 99426#L357-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 102760#L384-26 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 101006#L3231-4 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 101007#L2616-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 101605#L1947-4 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 102039#L2620-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 102040#L2633-1 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 99458#L2768-2 assume !(0 != timeShift_~tmp___9~2#1); 99459#L2859-3 assume !(1 == ~doorState~0); 114426#L2859-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 114425#L357-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 103447#L384-29 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 98186#L3231-5 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 98187#L2499-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 100002#L1947-5 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 100841#L2512-2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 101247#L2867-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 101249#L2556-3 assume !(1 == ~currentHeading~0); 102844#L2566-9 assume !(0 == ~currentFloorID~0); 102887#L2566-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 103595#L2572-7 assume { :end_inline_continueInDirection } true; 111269#L2876-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 111268#L357-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 103654#L384-51 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 111267#L3231-7 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 111262#L951-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 111260#L951-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 111259#L2891-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 111258#L357-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 105411#L384-52 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 111257#L3231-8 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 111255#L2616-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 111254#L1947-8 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 109951#L2620-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 101669#L2633-2 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 101058#L2768-4 assume !(0 != timeShift_~tmp___9~2#1); 98374#L2859-6 assume !(1 == ~doorState~0); 98375#L2859-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 99250#L357-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 100788#L384-55 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 100789#L3231-9 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 101479#L2499-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 102621#L1947-9 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 102911#L2512-4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 102912#L2867-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 102200#L2556-6 assume !(1 == ~currentHeading~0); 102201#L2566-18 assume !(0 == ~currentFloorID~0); 100042#L2566-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 100289#L2572-13 assume { :end_inline_continueInDirection } true; 112374#L2876-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 112373#L357-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 104612#L384-77 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 112371#L3231-11 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 112367#L951-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 112365#L951-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 112364#L2891-2 assume { :end_inline_timeShift } true; 112363#L1123 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret15#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 112362#L95-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 112356#L120-1 bobCall_#t~ret15#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret15#1;havoc bobCall_#t~ret15#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 112352#L628-1 assume 0 == initPersonOnFloor_~floor#1; 112328#L629-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 112312#L736-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 112307#L420-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 112301#L432-5 assume { :end_inline_callOnFloor } true; 112299#L772-1 assume { :end_inline_initPersonOnFloor } true; 112298#L1056 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret21#1, cleanup_#t~ret22#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 111994#L357-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 104281#L384-78 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 109957#L3231-12 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 109953#L2616-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 109954#L1947-12 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 112254#L2620-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 102143#L2633-3 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 103200#L2768-6 assume !(0 != timeShift_~tmp___9~2#1); 102933#L2859-9 assume !(1 == ~doorState~0); 102859#L2859-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 101397#L357-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 101398#L384-81 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 115616#L3231-13 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 115608#L2499-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 101565#L1947-13 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 101566#L2512-6 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 99702#L2867-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 99704#L2556-9 assume !(1 == ~currentHeading~0); 101651#L2566-27 assume !(0 == ~currentFloorID~0); 100766#L2566-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 101122#L2572-19 assume { :end_inline_continueInDirection } true; 101211#L2876-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 100903#L357-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 100904#L384-103 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 123103#L3231-15 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 123099#L951-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 123093#L951-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 123090#L2891-3 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 123089#L1139-2 [2022-11-02 20:48:52,078 INFO L750 eck$LassoCheckResult]: Loop: 123089#L1139-2 assume !false; 123088#L1140 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 101430#L1143 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 101431#L1818 cleanup_#t~ret21#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret21#1;havoc cleanup_#t~ret21#1; 103495#L1147 assume 1 != cleanup_~tmp___0~3#1; 99390#L1147-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret57#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 99391#L357-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 99366#L384-104 anyStopRequested_#t~ret52#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret52#1;havoc anyStopRequested_#t~ret52#1; 99367#L2055 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 98848#L2119 isIdle_#t~ret57#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret57#1;havoc isIdle_#t~ret57#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 98849#L2132 cleanup_#t~ret22#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 103375#L1159 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 103479#L357-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 115547#L384-109 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 115546#L3231-16 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 115544#L2616-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 115543#L1947-16 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 115542#L2620-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 101314#L2633-4 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 101315#L2768-8 assume !(0 != timeShift_~tmp___9~2#1); 103419#L2859-12 assume 1 == ~doorState~0;~doorState~0 := 0; 121480#L2859-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 103376#L357-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 103259#L384-112 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 103260#L3231-17 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 103374#L2499-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 100017#L1947-17 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 100018#L2512-8 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 119515#L2867-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 119508#L2556-12 assume !(1 == ~currentHeading~0); 119503#L2566-36 assume !(0 == ~currentFloorID~0); 101696#L2566-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 101697#L2572-25 assume { :end_inline_continueInDirection } true; 101786#L2876-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 102406#L357-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 103284#L384-134 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 123104#L3231-19 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 123095#L951-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 123092#L951-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 123091#L2891-4 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 123089#L1139-2 [2022-11-02 20:48:52,082 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:48:52,082 INFO L85 PathProgramCache]: Analyzing trace with hash -1825840330, now seen corresponding path program 1 times [2022-11-02 20:48:52,082 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:48:52,083 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1193840879] [2022-11-02 20:48:52,083 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:48:52,083 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:48:52,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:48:52,410 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:48:52,413 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:48:52,413 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1193840879] [2022-11-02 20:48:52,414 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1193840879] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:48:52,414 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:48:52,414 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:48:52,414 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [409161449] [2022-11-02 20:48:52,415 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:48:52,416 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:48:52,418 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:48:52,418 INFO L85 PathProgramCache]: Analyzing trace with hash 385444851, now seen corresponding path program 1 times [2022-11-02 20:48:52,418 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:48:52,419 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1950397230] [2022-11-02 20:48:52,420 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:48:52,420 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:48:52,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:48:52,563 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:48:52,566 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:48:52,566 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1950397230] [2022-11-02 20:48:52,566 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1950397230] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:48:52,567 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:48:52,567 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 20:48:52,567 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [173758097] [2022-11-02 20:48:52,568 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:48:52,568 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:48:52,568 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:48:52,569 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-02 20:48:52,569 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-02 20:48:52,569 INFO L87 Difference]: Start difference. First operand 28734 states and 53636 transitions. cyclomatic complexity: 24904 Second operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:49:03,485 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:49:03,486 INFO L93 Difference]: Finished difference Result 277729 states and 520906 transitions. [2022-11-02 20:49:03,486 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 277729 states and 520906 transitions. [2022-11-02 20:49:05,413 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 79864 [2022-11-02 20:49:07,153 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 277729 states to 277729 states and 520906 transitions. [2022-11-02 20:49:07,153 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 277729 [2022-11-02 20:49:07,397 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 277729 [2022-11-02 20:49:07,416 INFO L73 IsDeterministic]: Start isDeterministic. Operand 277729 states and 520906 transitions. [2022-11-02 20:49:07,766 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-02 20:49:07,766 INFO L218 hiAutomatonCegarLoop]: Abstraction has 277729 states and 520906 transitions. [2022-11-02 20:49:07,974 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 277729 states and 520906 transitions. [2022-11-02 20:49:09,714 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 277729 to 57289. [2022-11-02 20:49:09,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57289 states, 57289 states have (on average 1.8661523154532285) internal successors, (106910), 57288 states have internal predecessors, (106910), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:49:10,284 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57289 states to 57289 states and 106910 transitions. [2022-11-02 20:49:10,284 INFO L240 hiAutomatonCegarLoop]: Abstraction has 57289 states and 106910 transitions. [2022-11-02 20:49:10,298 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-02 20:49:10,299 INFO L428 stractBuchiCegarLoop]: Abstraction has 57289 states and 106910 transitions. [2022-11-02 20:49:10,299 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-11-02 20:49:10,299 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 57289 states and 106910 transitions. [2022-11-02 20:49:10,458 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 12908 [2022-11-02 20:49:10,459 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:49:10,459 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:49:10,463 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:49:10,464 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:49:10,464 INFO L748 eck$LassoCheckResult]: Stem: 409354#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 409355#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~7#1, main_~tmp~11#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 410235#L1735 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 410236#L1728 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 410312#L1743 main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret27#1;havoc main_#t~ret27#1; 410399#L1333 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 409400#L1307 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret20#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 409033#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 405994#L120 bigMacCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret20#1;havoc bigMacCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 408585#L628 assume 0 == initPersonOnFloor_~floor#1; 409133#L629 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 404703#L736-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 406210#L420 assume !(0 == callOnFloor_~floorID#1); 409941#L423 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 405424#L432-2 assume { :end_inline_callOnFloor } true; 405425#L772 assume { :end_inline_initPersonOnFloor } true; 409758#L1111 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 409759#L357 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 412740#L384 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 409750#L3231 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 409751#L2616 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 409640#L1947 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 409641#L2620 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 412138#L2633 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 412139#L2768 assume !(0 != timeShift_~tmp___9~2#1); 412133#L2859 assume !(1 == ~doorState~0); 412134#L2859-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 410329#L357-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 410330#L384-3 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 406465#L3231-1 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 406466#L2499 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 404962#L1947-1 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 404963#L2512 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 408306#L2867 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 410201#L2556 assume !(1 == ~currentHeading~0); 414268#L2566 assume !(0 == ~currentFloorID~0); 404285#L2566-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 414267#L2572-1 assume { :end_inline_continueInDirection } true; 423712#L2876-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 412220#L357-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 412221#L384-25 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 405645#L3231-3 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 405646#L951 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 410370#L951-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 405965#L2891 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 405966#L357-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 416393#L384-26 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 416394#L3231-4 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 416389#L2616-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 416390#L1947-4 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 414320#L2620-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 414321#L2633-1 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 429074#L2768-2 assume !(0 != timeShift_~tmp___9~2#1); 429075#L2859-3 assume !(1 == ~doorState~0); 409896#L2859-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 409897#L357-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 410234#L384-29 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 404721#L3231-5 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 404722#L2499-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 406556#L1947-5 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 407416#L2512-2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 407850#L2867-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 407852#L2556-3 assume !(1 == ~currentHeading~0); 409527#L2566-9 assume !(0 == ~currentFloorID~0); 409576#L2566-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 410480#L2572-7 assume { :end_inline_continueInDirection } true; 428566#L2876-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 408524#L357-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 408525#L384-51 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 410194#L3231-7 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 410195#L951-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 409023#L951-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 404746#L2891-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 404747#L357-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 426128#L384-52 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 406464#L3231-8 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 404431#L2616-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 404432#L1947-8 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 414325#L2620-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 410355#L2633-2 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 430493#L2768-4 assume !(0 != timeShift_~tmp___9~2#1); 430492#L2859-6 assume !(1 == ~doorState~0); 430490#L2859-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 430491#L357-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 430487#L384-55 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 430488#L3231-9 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 430479#L2499-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 408954#L1947-9 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 406684#L2512-4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 409607#L2867-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 409645#L2556-6 assume !(1 == ~currentHeading~0); 410055#L2566-18 assume !(0 == ~currentFloorID~0); 406596#L2566-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 405078#L2572-13 assume { :end_inline_continueInDirection } true; 405079#L2876-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 417699#L357-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 417698#L384-77 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 417692#L3231-11 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 417693#L951-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 417685#L951-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 417686#L2891-2 assume { :end_inline_timeShift } true; 417681#L1123 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret15#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 417682#L95-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 438724#L120-1 bobCall_#t~ret15#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret15#1;havoc bobCall_#t~ret15#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 438723#L628-1 assume 0 == initPersonOnFloor_~floor#1; 408530#L629-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 404269#L736-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 408138#L420-2 assume !(0 == callOnFloor_~floorID#1); 408139#L423-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 442982#L432-5 assume { :end_inline_callOnFloor } true; 442981#L772-1 assume { :end_inline_initPersonOnFloor } true; 442980#L1056 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret21#1, cleanup_#t~ret22#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 442979#L357-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 434892#L384-78 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 442978#L3231-12 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 442976#L2616-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 442975#L1947-12 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 442974#L2620-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 408781#L2633-3 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 409930#L2768-6 assume !(0 != timeShift_~tmp___9~2#1); 409630#L2859-9 assume !(1 == ~doorState~0); 409550#L2859-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 409551#L357-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 440112#L384-81 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 440113#L3231-13 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 405566#L2499-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 405567#L1947-13 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 443076#L2512-6 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 443074#L2867-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 443075#L2556-9 assume !(1 == ~currentHeading~0); 443652#L2566-27 assume !(0 == ~currentFloorID~0); 443651#L2566-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 407861#L2572-19 assume { :end_inline_continueInDirection } true; 407812#L2876-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 443844#L357-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 443845#L384-103 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 443835#L3231-15 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 443836#L951-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 407340#L951-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 407341#L2891-3 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 451988#L1139-2 [2022-11-02 20:49:10,465 INFO L750 eck$LassoCheckResult]: Loop: 451988#L1139-2 assume !false; 443554#L1140 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 442729#L1143 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 442727#L1818 cleanup_#t~ret21#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret21#1;havoc cleanup_#t~ret21#1; 442728#L1147 assume 1 != cleanup_~tmp___0~3#1; 405931#L1147-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret57#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 405932#L357-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 442697#L384-104 anyStopRequested_#t~ret52#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret52#1;havoc anyStopRequested_#t~ret52#1; 442698#L2055 assume !(0 != anyStopRequested_~tmp___3~0#1); 442622#L2059 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 442616#L2119 isIdle_#t~ret57#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret57#1;havoc isIdle_#t~ret57#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 442612#L2132 cleanup_#t~ret22#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 410284#L1159 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 410285#L357-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 431507#L384-109 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 431508#L3231-16 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 431499#L2616-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 431500#L1947-16 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 431230#L2620-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 410248#L2633-4 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 458137#L2768-8 assume !(0 != timeShift_~tmp___9~2#1); 458136#L2859-12 assume 1 == ~doorState~0;~doorState~0 := 0; 458135#L2859-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 410150#L357-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 410151#L384-112 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 410146#L3231-17 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 410147#L2499-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 458134#L1947-17 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 458127#L2512-8 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 458125#L2867-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 410286#L2556-12 assume !(1 == ~currentHeading~0); 407405#L2566-36 assume !(0 == ~currentFloorID~0); 407406#L2566-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 408313#L2572-25 assume { :end_inline_continueInDirection } true; 408403#L2876-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 444536#L357-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 410700#L384-134 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 444533#L3231-19 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 444524#L951-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 444394#L951-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 444395#L2891-4 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 451988#L1139-2 [2022-11-02 20:49:10,466 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:49:10,466 INFO L85 PathProgramCache]: Analyzing trace with hash -386602737, now seen corresponding path program 1 times [2022-11-02 20:49:10,466 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:49:10,466 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1321333447] [2022-11-02 20:49:10,467 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:49:10,467 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:49:10,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:49:10,573 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:49:10,573 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:49:10,574 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1321333447] [2022-11-02 20:49:10,574 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1321333447] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:49:10,574 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:49:10,575 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:49:10,575 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1549936486] [2022-11-02 20:49:10,575 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:49:10,576 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:49:10,576 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:49:10,576 INFO L85 PathProgramCache]: Analyzing trace with hash -1916667049, now seen corresponding path program 1 times [2022-11-02 20:49:10,576 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:49:10,577 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [714849264] [2022-11-02 20:49:10,577 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:49:10,577 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:49:10,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:49:10,660 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:49:10,660 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:49:10,660 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [714849264] [2022-11-02 20:49:10,661 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [714849264] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:49:10,661 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:49:10,661 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 20:49:10,661 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2108145114] [2022-11-02 20:49:10,661 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:49:10,662 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-02 20:49:10,662 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:49:10,662 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-02 20:49:10,663 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-02 20:49:10,663 INFO L87 Difference]: Start difference. First operand 57289 states and 106910 transitions. cyclomatic complexity: 49623 Second operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 8 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:49:25,650 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:49:25,650 INFO L93 Difference]: Finished difference Result 333251 states and 621440 transitions. [2022-11-02 20:49:25,650 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 333251 states and 621440 transitions. [2022-11-02 20:49:27,828 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 92194 [2022-11-02 20:49:29,340 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 333251 states to 333251 states and 621440 transitions. [2022-11-02 20:49:29,340 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 333251 [2022-11-02 20:49:29,537 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 333251 [2022-11-02 20:49:29,537 INFO L73 IsDeterministic]: Start isDeterministic. Operand 333251 states and 621440 transitions. [2022-11-02 20:49:29,710 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-02 20:49:29,711 INFO L218 hiAutomatonCegarLoop]: Abstraction has 333251 states and 621440 transitions. [2022-11-02 20:49:29,930 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 333251 states and 621440 transitions. [2022-11-02 20:49:31,583 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 333251 to 56832. [2022-11-02 20:49:31,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56832 states, 56832 states have (on average 1.8656214808558558) internal successors, (106027), 56831 states have internal predecessors, (106027), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:49:31,822 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56832 states to 56832 states and 106027 transitions. [2022-11-02 20:49:31,823 INFO L240 hiAutomatonCegarLoop]: Abstraction has 56832 states and 106027 transitions. [2022-11-02 20:49:31,823 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2022-11-02 20:49:31,824 INFO L428 stractBuchiCegarLoop]: Abstraction has 56832 states and 106027 transitions. [2022-11-02 20:49:31,824 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-11-02 20:49:31,824 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 56832 states and 106027 transitions. [2022-11-02 20:49:32,046 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 12866 [2022-11-02 20:49:32,046 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:49:32,046 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:49:32,049 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:49:32,050 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:49:32,051 INFO L748 eck$LassoCheckResult]: Stem: 799896#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 799897#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret27#1, main_~retValue_acc~7#1, main_~tmp~11#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 800678#L1735 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 800679#L1728 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 800732#L1743 main_#t~ret27#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret27#1;havoc main_#t~ret27#1; 800795#L1333 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 799939#L1307 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret20#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 799604#L95 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 796626#L120 bigMacCall_#t~ret20#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret20#1;havoc bigMacCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 799183#L628 assume 0 == initPersonOnFloor_~floor#1; 799687#L629 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 795344#L736-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 796839#L420 assume !(0 == callOnFloor_~floorID#1); 800439#L423 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 796062#L432-2 assume { :end_inline_callOnFloor } true; 796063#L772 assume { :end_inline_initPersonOnFloor } true; 799650#L1111 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 795779#L357 assume !(0 == isFloorCalling_~floorID#1); 795781#L361 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 800869#L384 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 800870#L3231 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 800865#L2616 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 800866#L1947 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 800855#L2620 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 798817#L2633 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 800210#L2768 assume !(0 != timeShift_~tmp___9~2#1); 800851#L2859 assume !(1 == ~doorState~0); 801727#L2859-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 801728#L357-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 801903#L384-3 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 801904#L3231-1 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 801867#L2499 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 801868#L1947-1 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 818373#L2512 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 818333#L2867 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 818334#L2556 assume !(1 == ~currentHeading~0); 823468#L2566 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 823464#L2566-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 818193#L2572-1 assume { :end_inline_continueInDirection } true; 817525#L2876-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 817524#L357-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 817523#L384-25 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 817522#L3231-3 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 817519#L951 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 817517#L951-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 817512#L2891 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 800326#L357-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 800327#L384-26 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 819364#L3231-4 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 819363#L2616-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__base } true;havoc stopRequestedAtCurrentFloor__wrappee__base_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret73#1, stopRequestedAtCurrentFloor__wrappee__base_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20#1, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 819361#L357-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 819356#L384-28 stopRequestedAtCurrentFloor__wrappee__base_#t~ret73#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret73#1;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret73#1; 819353#L2589-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res#1 := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24#1; 819352#L2601-3 stopRequestedAtCurrentFloor_#t~ret78#1 := stopRequestedAtCurrentFloor__wrappee__base_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__base } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret78#1;havoc stopRequestedAtCurrentFloor_#t~ret78#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 819351#L2633-1 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 819349#L2768-2 assume !(0 != timeShift_~tmp___9~2#1); 819348#L2859-3 assume !(1 == ~doorState~0); 819346#L2859-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 819345#L357-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 819343#L384-29 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 819342#L3231-5 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 819340#L2499-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 819338#L1947-5 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 819332#L2512-2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 819310#L2867-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 819309#L2556-3 assume !(1 == ~currentHeading~0); 819303#L2566-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 819302#L2566-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 815243#L2572-7 assume { :end_inline_continueInDirection } true; 814317#L2876-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 814315#L357-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 814313#L384-51 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 814311#L3231-7 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 814307#L951-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 814305#L951-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 814300#L2891-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 814298#L357-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 814297#L384-52 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 814296#L3231-8 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 814295#L2616-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__base } true;havoc stopRequestedAtCurrentFloor__wrappee__base_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret73#1, stopRequestedAtCurrentFloor__wrappee__base_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20#1, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 814294#L357-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 814288#L384-54 stopRequestedAtCurrentFloor__wrappee__base_#t~ret73#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret73#1;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret73#1; 814285#L2589-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res#1 := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24#1; 814284#L2601-5 stopRequestedAtCurrentFloor_#t~ret78#1 := stopRequestedAtCurrentFloor__wrappee__base_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__base } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret78#1;havoc stopRequestedAtCurrentFloor_#t~ret78#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 814283#L2633-2 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 814276#L2768-4 assume !(0 != timeShift_~tmp___9~2#1); 814277#L2859-6 assume !(1 == ~doorState~0); 815302#L2859-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 815301#L357-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 815298#L384-55 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 815297#L3231-9 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 815295#L2499-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 815293#L1947-9 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 815291#L2512-4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 815287#L2867-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 815262#L2556-6 assume !(1 == ~currentHeading~0); 815252#L2566-18 assume !(0 == ~currentFloorID~0); 813700#L2566-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 813696#L2572-13 assume { :end_inline_continueInDirection } true; 810523#L2876-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 810522#L357-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 802791#L384-77 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 810521#L3231-11 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 810516#L951-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 810514#L951-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 810513#L2891-2 assume { :end_inline_timeShift } true; 810512#L1123 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret15#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 810511#L95-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 810505#L120-1 bobCall_#t~ret15#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret15#1;havoc bobCall_#t~ret15#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 806458#L628-1 assume 0 == initPersonOnFloor_~floor#1; 806459#L629-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 806387#L736-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 806388#L420-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 810445#L432-5 assume { :end_inline_callOnFloor } true; 802856#L772-1 assume { :end_inline_initPersonOnFloor } true; 800936#L1056 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret21#1, cleanup_#t~ret22#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 800937#L357-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 800920#L384-78 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 800921#L3231-12 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 800905#L2616-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 800906#L1947-12 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 800897#L2620-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 799363#L2633-3 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 811319#L2768-6 assume !(0 != timeShift_~tmp___9~2#1); 811318#L2859-9 assume !(1 == ~doorState~0); 811317#L2859-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 811316#L357-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 811315#L384-81 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 811314#L3231-13 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 811312#L2499-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 811310#L1947-13 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 811296#L2512-6 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 810443#L2867-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 806346#L2556-9 assume !(1 == ~currentHeading~0); 806343#L2566-27 assume !(0 == ~currentFloorID~0); 806340#L2566-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 806339#L2572-19 assume { :end_inline_continueInDirection } true; 804148#L2876-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 804149#L357-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 804140#L384-103 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 804141#L3231-15 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 804136#L951-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 804137#L1947-15 __utac_acc__Specification14_spec__1_#t~ret11#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 804130#L3240-3 __utac_acc__Specification14_spec__1_#t~ret12#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1; 804131#L956-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 804124#L951-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 804125#L2891-3 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 839367#L1139-2 [2022-11-02 20:49:32,052 INFO L750 eck$LassoCheckResult]: Loop: 839367#L1139-2 assume !false; 804118#L1140 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 804119#L1143 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 804114#L1818 cleanup_#t~ret21#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret21#1;havoc cleanup_#t~ret21#1; 804115#L1147 assume 1 != cleanup_~tmp___0~3#1; 804110#L1147-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret57#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~16#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~16#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret52#1, anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~15#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~15#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 804111#L357-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 804106#L384-104 anyStopRequested_#t~ret52#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret52#1;havoc anyStopRequested_#t~ret52#1; 804107#L2055 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 804102#L2119 isIdle_#t~ret57#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~16#1 := isIdle_#t~ret57#1;havoc isIdle_#t~ret57#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~16#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 804103#L2132 cleanup_#t~ret22#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 804098#L1159 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_~tmp~23#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~23#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~21#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~21#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 804099#L357-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 802847#L384-109 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 802848#L3231-16 stopRequestedAtCurrentFloor_#t~ret75#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~21#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 802842#L2616-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 802843#L1947-16 stopRequestedAtCurrentFloor_#t~ret76#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 804086#L2620-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 800689#L2633-4 timeShift_#t~ret91#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1; 831018#L2768-8 assume !(0 != timeShift_~tmp___9~2#1); 831019#L2859-12 assume 1 == ~doorState~0;~doorState~0 := 0; 847647#L2859-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 800618#L357-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 800619#L384-112 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 847714#L3231-17 stopRequestedInDirection_#t~ret69#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 847711#L2499-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 847712#L1947-17 stopRequestedInDirection_#t~ret70#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~18#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 848169#L2512-8 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 848162#L2867-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret72#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 848155#L2556-12 assume !(1 == ~currentHeading~0); 847389#L2566-36 assume !(0 == ~currentFloorID~0); 847236#L2566-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 847227#L2572-25 assume { :end_inline_continueInDirection } true; 839388#L2876-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret10#1, __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret128#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 804164#L357-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 804163#L384-134 isExecutiveFloorCalling_#t~ret128#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret128#1;havoc isExecutiveFloorCalling_#t~ret128#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 804162#L3231-19 __utac_acc__Specification14_spec__1_#t~ret10#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret10#1;havoc __utac_acc__Specification14_spec__1_#t~ret10#1; 804161#L951-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 804160#L1947-19 __utac_acc__Specification14_spec__1_#t~ret11#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 804158#L3240-4 __utac_acc__Specification14_spec__1_#t~ret12#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1; 804159#L956-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 804150#L951-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 804151#L2891-4 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 839367#L1139-2 [2022-11-02 20:49:32,053 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:49:32,053 INFO L85 PathProgramCache]: Analyzing trace with hash 155077849, now seen corresponding path program 1 times [2022-11-02 20:49:32,054 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:49:32,054 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [173120107] [2022-11-02 20:49:32,054 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:49:32,054 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:49:32,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:49:32,180 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:49:32,181 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:49:32,181 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [173120107] [2022-11-02 20:49:32,186 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [173120107] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:49:32,186 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:49:32,186 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:49:32,187 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [366062578] [2022-11-02 20:49:32,187 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:49:32,187 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:49:32,188 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:49:32,188 INFO L85 PathProgramCache]: Analyzing trace with hash 1684701755, now seen corresponding path program 1 times [2022-11-02 20:49:32,188 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:49:32,188 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1973038260] [2022-11-02 20:49:32,188 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:49:32,189 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:49:32,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:49:32,206 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:49:32,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:49:32,256 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:49:34,470 INFO L210 LassoAnalysis]: Preferences: [2022-11-02 20:49:34,471 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-11-02 20:49:34,471 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-11-02 20:49:34,471 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-11-02 20:49:34,471 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-11-02 20:49:34,472 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:34,472 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-11-02 20:49:34,472 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-11-02 20:49:34,472 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product03.cil.c_Iteration5_Loop [2022-11-02 20:49:34,473 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-11-02 20:49:34,473 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-11-02 20:49:34,513 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,542 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,545 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,547 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,553 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,557 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,560 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,564 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,567 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,570 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,573 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,579 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,582 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,584 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,587 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,589 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,609 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,612 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,615 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,619 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,626 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,634 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,637 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,641 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,644 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,647 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,650 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,656 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,659 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,661 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,665 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,668 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,672 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,674 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,677 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,685 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,690 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,694 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,697 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,700 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,703 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,705 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,710 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,713 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,720 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,724 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,727 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,729 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,736 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,757 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,765 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,776 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,779 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,782 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,793 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,795 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,797 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,800 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,802 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,804 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,810 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,818 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,822 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,824 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:34,832 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:35,600 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-11-02 20:49:35,603 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-11-02 20:49:35,605 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:35,605 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:35,607 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:35,620 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:49:35,620 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:35,638 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2022-11-02 20:49:35,684 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:35,684 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:35,685 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:35,686 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:35,694 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-11-02 20:49:35,694 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:49:35,694 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2022-11-02 20:49:36,654 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-11-02 20:49:36,658 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:36,659 INFO L210 LassoAnalysis]: Preferences: [2022-11-02 20:49:36,659 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-11-02 20:49:36,659 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-11-02 20:49:36,659 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-11-02 20:49:36,659 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-11-02 20:49:36,659 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:36,659 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-11-02 20:49:36,659 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-11-02 20:49:36,659 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product03.cil.c_Iteration5_Loop [2022-11-02 20:49:36,660 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-11-02 20:49:36,660 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-11-02 20:49:36,674 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,676 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,685 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,687 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,698 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,701 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,707 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,710 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,713 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,716 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,718 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,721 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,725 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,728 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,737 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,740 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,742 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,744 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,747 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,749 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,752 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,763 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,765 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,767 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,770 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,772 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,774 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,785 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,791 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,794 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,797 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,801 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,805 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,807 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,810 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,812 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,816 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,818 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,824 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,826 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,829 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,831 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,834 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,840 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,844 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,846 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,854 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,856 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,862 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,864 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,891 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,898 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,910 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,927 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,930 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,932 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,937 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,939 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,941 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,949 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,951 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,954 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,957 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,964 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:36,967 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:49:37,696 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-11-02 20:49:37,701 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-11-02 20:49:37,703 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:37,703 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:37,704 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:37,720 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:49:37,735 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2022-11-02 20:49:37,736 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:49:37,737 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:49:37,737 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:49:37,737 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:49:37,737 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:49:37,740 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:49:37,740 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:49:37,754 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-02 20:49:37,794 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:37,795 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:37,795 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:37,796 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:37,805 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:49:37,822 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2022-11-02 20:49:37,824 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:49:37,824 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:49:37,824 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:49:37,824 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:49:37,824 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:49:37,826 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:49:37,827 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:49:37,841 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-11-02 20:49:37,882 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2022-11-02 20:49:37,882 INFO L444 ModelExtractionUtils]: 2 out of 5 variables were initially zero. Simplification set additionally 0 variables to zero. [2022-11-02 20:49:37,884 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:49:37,884 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:49:37,888 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:49:37,918 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-11-02 20:49:37,918 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-11-02 20:49:37,918 INFO L513 LassoAnalysis]: Proved termination. [2022-11-02 20:49:37,919 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~2#1) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~2#1 Supporting invariants [] [2022-11-02 20:49:37,950 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2022-11-02 20:49:37,969 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:37,971 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-11-02 20:49:38,020 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:49:38,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:49:38,300 INFO L263 TraceCheckSpWp]: Trace formula consists of 992 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-02 20:49:38,306 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:49:38,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:49:38,621 INFO L263 TraceCheckSpWp]: Trace formula consists of 171 conjuncts, 5 conjunts are in the unsatisfiable core [2022-11-02 20:49:38,625 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:49:38,871 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:49:38,878 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2022-11-02 20:49:38,880 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 56832 states and 106027 transitions. cyclomatic complexity: 49201 Second operand has 5 states, 5 states have (on average 38.0) internal successors, (190), 5 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:49:40,186 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 56832 states and 106027 transitions. cyclomatic complexity: 49201. Second operand has 5 states, 5 states have (on average 38.0) internal successors, (190), 5 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 69722 states and 130001 transitions. Complement of second has 8 states. [2022-11-02 20:49:40,198 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2022-11-02 20:49:40,201 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 38.0) internal successors, (190), 5 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:49:40,211 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2022-11-02 20:49:40,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 10396 transitions. [2022-11-02 20:49:40,218 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10396 transitions. Stem has 147 letters. Loop has 43 letters. [2022-11-02 20:49:40,223 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-02 20:49:40,223 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10396 transitions. Stem has 190 letters. Loop has 43 letters. [2022-11-02 20:49:40,227 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-02 20:49:40,228 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10396 transitions. Stem has 147 letters. Loop has 86 letters. [2022-11-02 20:49:40,229 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-02 20:49:40,229 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 69722 states and 130001 transitions. [2022-11-02 20:49:40,607 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2022-11-02 20:49:40,608 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 69722 states to 0 states and 0 transitions. [2022-11-02 20:49:40,608 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2022-11-02 20:49:40,608 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2022-11-02 20:49:40,608 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2022-11-02 20:49:40,608 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-02 20:49:40,608 INFO L218 hiAutomatonCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-02 20:49:40,609 INFO L240 hiAutomatonCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-02 20:49:40,610 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:49:40,611 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:49:40,615 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:49:40,617 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand has 3 states, 3 states have (on average 49.0) internal successors, (147), 3 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:49:40,617 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:49:40,617 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-11-02 20:49:40,617 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2022-11-02 20:49:40,617 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2022-11-02 20:49:40,618 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2022-11-02 20:49:40,618 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2022-11-02 20:49:40,618 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2022-11-02 20:49:40,618 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2022-11-02 20:49:40,618 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-02 20:49:40,618 INFO L218 hiAutomatonCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-02 20:49:40,618 INFO L240 hiAutomatonCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-02 20:49:40,619 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-02 20:49:40,620 INFO L428 stractBuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-02 20:49:40,620 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-11-02 20:49:40,621 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2022-11-02 20:49:40,621 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2022-11-02 20:49:40,621 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2022-11-02 20:49:40,628 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 02.11 08:49:40 BoogieIcfgContainer [2022-11-02 20:49:40,629 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2022-11-02 20:49:40,631 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-02 20:49:40,631 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-02 20:49:40,631 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-02 20:49:40,632 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:48:34" (3/4) ... [2022-11-02 20:49:40,637 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-11-02 20:49:40,638 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-02 20:49:40,639 INFO L158 Benchmark]: Toolchain (without parser) took 76911.68ms. Allocated memory was 127.9MB in the beginning and 12.0GB in the end (delta: 11.9GB). Free memory was 86.5MB in the beginning and 9.0GB in the end (delta: -9.0GB). Peak memory consumption was 2.9GB. Max. memory is 16.1GB. [2022-11-02 20:49:40,639 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 127.9MB. Free memory is still 105.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-02 20:49:40,640 INFO L158 Benchmark]: CACSL2BoogieTranslator took 790.51ms. Allocated memory is still 127.9MB. Free memory was 86.2MB in the beginning and 76.4MB in the end (delta: 9.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-02 20:49:40,650 INFO L158 Benchmark]: Boogie Procedure Inliner took 387.88ms. Allocated memory is still 127.9MB. Free memory was 76.4MB in the beginning and 82.1MB in the end (delta: -5.6MB). Peak memory consumption was 57.4MB. Max. memory is 16.1GB. [2022-11-02 20:49:40,652 INFO L158 Benchmark]: Boogie Preprocessor took 429.18ms. Allocated memory was 127.9MB in the beginning and 207.6MB in the end (delta: 79.7MB). Free memory was 82.1MB in the beginning and 124.5MB in the end (delta: -42.4MB). Peak memory consumption was 40.5MB. Max. memory is 16.1GB. [2022-11-02 20:49:40,654 INFO L158 Benchmark]: RCFGBuilder took 9546.46ms. Allocated memory was 207.6MB in the beginning and 530.6MB in the end (delta: 323.0MB). Free memory was 123.8MB in the beginning and 295.2MB in the end (delta: -171.4MB). Peak memory consumption was 213.4MB. Max. memory is 16.1GB. [2022-11-02 20:49:40,654 INFO L158 Benchmark]: BuchiAutomizer took 65738.70ms. Allocated memory was 530.6MB in the beginning and 12.0GB in the end (delta: 11.5GB). Free memory was 295.2MB in the beginning and 9.0GB in the end (delta: -8.7GB). Peak memory consumption was 2.7GB. Max. memory is 16.1GB. [2022-11-02 20:49:40,655 INFO L158 Benchmark]: Witness Printer took 6.88ms. Allocated memory is still 12.0GB. Free memory is still 9.0GB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-02 20:49:40,657 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 127.9MB. Free memory is still 105.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 790.51ms. Allocated memory is still 127.9MB. Free memory was 86.2MB in the beginning and 76.4MB in the end (delta: 9.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 387.88ms. Allocated memory is still 127.9MB. Free memory was 76.4MB in the beginning and 82.1MB in the end (delta: -5.6MB). Peak memory consumption was 57.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 429.18ms. Allocated memory was 127.9MB in the beginning and 207.6MB in the end (delta: 79.7MB). Free memory was 82.1MB in the beginning and 124.5MB in the end (delta: -42.4MB). Peak memory consumption was 40.5MB. Max. memory is 16.1GB. * RCFGBuilder took 9546.46ms. Allocated memory was 207.6MB in the beginning and 530.6MB in the end (delta: 323.0MB). Free memory was 123.8MB in the beginning and 295.2MB in the end (delta: -171.4MB). Peak memory consumption was 213.4MB. Max. memory is 16.1GB. * BuchiAutomizer took 65738.70ms. Allocated memory was 530.6MB in the beginning and 12.0GB in the end (delta: 11.5GB). Free memory was 295.2MB in the beginning and 9.0GB in the end (delta: -8.7GB). Peak memory consumption was 2.7GB. Max. memory is 16.1GB. * Witness Printer took 6.88ms. Allocated memory is still 12.0GB. Free memory is still 9.0GB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 6 terminating modules (5 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 5 modules have a trivial ranking function, the largest among these consists of 8 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 65.6s and 6 iterations. TraceHistogramMax:1. Analysis of lassos took 7.8s. Construction of modules took 19.1s. Büchi inclusion checks took 37.2s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 0. Automata minimization 6.4s AutomataMinimizationTime, 4 MinimizatonAttempts, 527964 StatesRemovedByMinimization, 4 NontrivialMinimizations. Non-live state removal took 9.0s Buchi closure took 0.5s. Biggest automaton had -1 states and ocurred in iteration -1. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 487530 SdHoareTripleChecker+Valid, 23.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 487529 mSDsluCounter, 606267 SdHoareTripleChecker+Invalid, 19.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 522164 mSDsCounter, 3952 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 26143 IncrementalHoareTripleChecker+Invalid, 30095 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3952 mSolverCounterUnsat, 84103 mSDtfsCounter, 26143 mSolverCounterSat, 1.3s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI4 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital178 mio100 ax100 hnf100 lsp19 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq223 hnf86 smp100 dnf163 smp100 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 52ms VariablesStem: 0 VariablesLoop: 0 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 0 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 1.0s InitialAbstractionConstructionTime: 0.0s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! [2022-11-02 20:49:40,714 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f37b6a1-fedd-49c5-bafd-e8b5f39d29da/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE